--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa"} {"level":"info","ts":"2026-07-10T04:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"} {"level":"error","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e"} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e"} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:11:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:11:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"info","ts":"2026-07-10T04:11:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e"} {"level":"info","ts":"2026-07-10T04:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf631aac30b39989e9066bc773cf8c59b07d992c60f73c4c4918a3020c52166"} {"level":"info","ts":"2026-07-10T04:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df78c58377ea6d0af0fd1ff8491c4474df18f70d4ac7d180eca1d2ae56a2290b"} {"level":"info","ts":"2026-07-10T04:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b409809b3b0bd10d67021783476f496d022dbbcf999dd1a9770ce267764403ef"} {"level":"info","ts":"2026-07-10T04:12:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de37319800f4eb7bdc00a8b0881e31a1c27260a56ecc6c263253e8278121e4fa"} {"level":"info","ts":"2026-07-10T04:12:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9472c7a1ee933a9a4d18f22b2e46f5b02a34f3b61c4d01a46e73db74e55dd69b"} {"level":"info","ts":"2026-07-10T04:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cf45a81cd642287618c3d2a88f808e8765eec57a172aca8f447fe8dd3049c6e"} {"level":"info","ts":"2026-07-10T04:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47e35b1f3802749b332452f8939b3179cf33399c5df03dc15d587585677ced23"} {"level":"info","ts":"2026-07-10T04:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8dfeac8f43598eca19ca641a4139e3737522a7154143cbb8810d7dfa842b14"} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba"} {"level":"info","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"} {"level":"info","ts":"2026-07-10T04:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba"} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f"} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953"} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"} {"level":"info","ts":"2026-07-10T04:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953"} {"level":"info","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47404","PortSpecifier":{"PortValue":47404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47404","PortSpecifier":{"PortValue":47404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656857,"nanos":958256065},"http":{"id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0547e588-b54f-4c9f-af7c-32cdfe3cd35b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59550","PortSpecifier":{"PortValue":59550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59550","PortSpecifier":{"PortValue":59550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656858,"nanos":23866685},"http":{"id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5b4c8e1-7fc9-4ed0-821b-a0ebd4564cef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528a15b2-8657-48f6-8410-9176580071e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"528a15b2-8657-48f6-8410-9176580071e4","method":"GET","path":"/maas-api/v1/api-keys/8acb41c2-fb18-45d9-906e-7714dbf6fc5d","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528a15b2-8657-48f6-8410-9176580071e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656858,"nanos":81467906},"http":{"id":"528a15b2-8657-48f6-8410-9176580071e4","method":"GET","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8acb41c2-fb18-45d9-906e-7714dbf6fc5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"528a15b2-8657-48f6-8410-9176580071e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"528a15b2-8657-48f6-8410-9176580071e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8acb41c2-fb18-45d9-906e-7714dbf6fc5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528a15b2-8657-48f6-8410-9176580071e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528a15b2-8657-48f6-8410-9176580071e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528a15b2-8657-48f6-8410-9176580071e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59558","PortSpecifier":{"PortValue":59558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2540ce0-d5ca-495b-a817-631453e8e230","method":"GET","path":"/maas-api/v1/api-keys/495e9d8b-b125-4dc5-bc39-aad934e6447c","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59558","PortSpecifier":{"PortValue":59558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656858,"nanos":122811304},"http":{"id":"c2540ce0-d5ca-495b-a817-631453e8e230","method":"GET","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/495e9d8b-b125-4dc5-bc39-aad934e6447c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/495e9d8b-b125-4dc5-bc39-aad934e6447c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2540ce0-d5ca-495b-a817-631453e8e230","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656875,"nanos":533041934},"http":{"id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a36e89b-6f62-435a-8cbb-c2a7614efba1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4d2c662-6a53-451a-892c-ce9218523b57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656875,"nanos":571563858},"http":{"id":"c4d2c662-6a53-451a-892c-ce9218523b57","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4d2c662-6a53-451a-892c-ce9218523b57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49248","PortSpecifier":{"PortValue":49248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49248","PortSpecifier":{"PortValue":49248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656875,"nanos":612589755},"http":{"id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","method":"GET","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14ucH8QUsLzLnnFfL_RuZDq0ufG0NNVqs3XqxuasmtG5O5SKALognkXJF2Npi"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14ucH8QUsLzLnnFfL_RuZDq0ufG0NNVqs3XqxuasmtG5O5SKALognkXJF2Npi\"}"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a7a5b91-078c-4f77-ba71-a11d7b5365c2","keyName":"e2e-auth-iso-a-c1a3ec","subscription":"e2e-auth-iso-9a698e","tenant":"e2e-shared-a-937cca","userId":"9a7a5b91-078c-4f77-ba71-a11d7b5365c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9a698e"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"017d84ff-c86e-46e2-bd18-90f90ae8860c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33218","PortSpecifier":{"PortValue":33218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63364d86-99eb-4c7f-9898-928a39a473f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33218","PortSpecifier":{"PortValue":33218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656897,"nanos":139062006},"http":{"id":"63364d86-99eb-4c7f-9898-928a39a473f8","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63364d86-99eb-4c7f-9898-928a39a473f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36590","PortSpecifier":{"PortValue":36590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36590","PortSpecifier":{"PortValue":36590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656897,"nanos":177564637},"http":{"id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8ee4fd-b81f-4c0c-b9ee-980f1bbb9ae9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36602","PortSpecifier":{"PortValue":36602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a823c0a-e278-41fd-918e-56c3fb49c697","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36602","PortSpecifier":{"PortValue":36602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656897,"nanos":214308972},"http":{"id":"8a823c0a-e278-41fd-918e-56c3fb49c697","method":"GET","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17UqbN9Yxi46euLTs_xadtb2JRMTFFwrEjh7wG9jA4LNPQ1qvojmFyQNQq9kf"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17UqbN9Yxi46euLTs_xadtb2JRMTFFwrEjh7wG9jA4LNPQ1qvojmFyQNQq9kf\"}"} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T04:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a823c0a-e278-41fd-918e-56c3fb49c697","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45606","PortSpecifier":{"PortValue":45606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45606","PortSpecifier":{"PortValue":45606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656912,"nanos":374757461},"http":{"id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f23e40c6-0d24-4741-ab2c-f7b00905f0f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58620","PortSpecifier":{"PortValue":58620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58620","PortSpecifier":{"PortValue":58620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656912,"nanos":408538150},"http":{"id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a061eb-5649-46b5-9612-fc6aa48cfecf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd36335d-3d44-4516-861f-2b19056892a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd36335d-3d44-4516-861f-2b19056892a0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd36335d-3d44-4516-861f-2b19056892a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45618","PortSpecifier":{"PortValue":45618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656912,"nanos":449187081},"http":{"id":"cd36335d-3d44-4516-861f-2b19056892a0","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd36335d-3d44-4516-861f-2b19056892a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd36335d-3d44-4516-861f-2b19056892a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd36335d-3d44-4516-861f-2b19056892a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd36335d-3d44-4516-861f-2b19056892a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd36335d-3d44-4516-861f-2b19056892a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58630","PortSpecifier":{"PortValue":58630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58630","PortSpecifier":{"PortValue":58630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656912,"nanos":486797775},"http":{"id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b47c3ab-a2c2-42f4-ac26-f35eb19d6d78","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54052","PortSpecifier":{"PortValue":54052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54052","PortSpecifier":{"PortValue":54052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656937,"nanos":28938517},"http":{"id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41aff30f-5752-9484-8fe8-2dcf802d5b90","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656937,"nanos":86581747},"http":{"id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"863f8dbe-dc0e-4d03-a837-f26aabddbb5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d78e444-faca-4db4-9164-bc4ade0c492a","method":"GET","path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656937,"nanos":129758374},"http":{"id":"4d78e444-faca-4db4-9164-bc4ade0c492a","method":"GET","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d78e444-faca-4db4-9164-bc4ade0c492a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54056","PortSpecifier":{"PortValue":54056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","method":"GET","path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54056","PortSpecifier":{"PortValue":54056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656937,"nanos":168262228},"http":{"id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","method":"GET","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3253f9e8-6207-42aa-80f3-2ca538d4af61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c6e5db2-ede9-4f0d-b4d4-8e79bae4ac6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44274","PortSpecifier":{"PortValue":44274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c472d986-66d1-4a54-b125-4e2b1db012bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44274","PortSpecifier":{"PortValue":44274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656954,"nanos":499582991},"http":{"id":"c472d986-66d1-4a54-b125-4e2b1db012bc","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c472d986-66d1-4a54-b125-4e2b1db012bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55758","PortSpecifier":{"PortValue":55758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55758","PortSpecifier":{"PortValue":55758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656954,"nanos":539142573},"http":{"id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/auth-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5280afb2-a8cc-4cb2-b9a5-f896614b38bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b747ff-d9db-478d-81a5-71461b776c71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44284","PortSpecifier":{"PortValue":44284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70b747ff-d9db-478d-81a5-71461b776c71","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b747ff-d9db-478d-81a5-71461b776c71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44284","PortSpecifier":{"PortValue":44284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783656954,"nanos":576463283},"http":{"id":"70b747ff-d9db-478d-81a5-71461b776c71","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PY0qQ39COZkc7nmE_uXDpIzTrBfpTIoxb3Wv0dWRDGyWny6rqHYD8wOYAksU"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PY0qQ39COZkc7nmE_uXDpIzTrBfpTIoxb3Wv0dWRDGyWny6rqHYD8wOYAksU\"}"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"036be2de-9c97-4b9b-85dc-156df08e9908","keyName":"e2e-auth-iso-a-246575","subscription":"e2e-auth-iso-fc4a46","tenant":"e2e-shared-a-937cca","userId":"036be2de-9c97-4b9b-85dc-156df08e9908","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70b747ff-d9db-478d-81a5-71461b776c71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/auth-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fc4a46"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70b747ff-d9db-478d-81a5-71461b776c71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b747ff-d9db-478d-81a5-71461b776c71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:15:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b747ff-d9db-478d-81a5-71461b776c71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fdf499cb6542ac89ac41ff9d8879f05627d988223d27f0a5e89dea4140ea866"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a96878d9ebf91ce143a0c38f4e3ad248ef01388a3c47281521b8c22116ff7d0"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1abadc05d4736021366bc3da876f19892cf6e4ec88ba3bb50ba60535081ff0db"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f817bf396e203c292d9731323a0d4ad3d6d290de02ce7634b31d54f02c2cccd"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34bdb5b94d35a89ac88e92319e94d19abe1ea6596819b1e44c14bb4caffb63e6"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea8e2355a41768a5aa5af22fe661b4d79a0a8ea9e14c9028ddbd9c2c6bdb2c37"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a21bc4038554e2d959f9fd01ce7eb6c0ad87f98f3488d22183c971342e098d"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91c16f80e11b1a616a73a1dae58d68cc22850639134b94f137cdf2fa99b51d08"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/195123d45de5266d3c80771c64a54f761c42251401972d67a45e9863acf137ba"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9d2ec750cbc49e66e8144dd2664b25ceece208960aaa8661bfd22cfe124705e"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93648aeb1914013b1143d92729da132bcb951ec7693b9fa0b084f5c151f2767f"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/148c9a93a786cc3d924264e4d0bc97ca61e695db9717854d1b0f2f394fd48331"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc984ba020ee66c13b4ce4ff3f23c0fe34895cb3d3fd08e44ae0bc12a9f3d728"} {"level":"info","ts":"2026-07-10T04:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0534c89196de488c949a1796d09d19ee3a1f77b62955fbb30496e1863143953"} {"level":"info","ts":"2026-07-10T04:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22d60394b33e77d843c01db5b56929352de480525d0acc60cf3907c8c1f1ff56"} {"level":"info","ts":"2026-07-10T04:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba2a7ed44ee17af20a5e91ee15b1df827f6a55f2cb0d5f661ff2094e504e18b1"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612"} {"level":"info","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:16:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de"} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:16:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:16:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612"} {"level":"info","ts":"2026-07-10T04:16:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49472","PortSpecifier":{"PortValue":49472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49472","PortSpecifier":{"PortValue":49472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657033,"nanos":254291460},"http":{"id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/sub-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf13cee5-2d34-4de2-9a40-181ca1c78e30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657033,"nanos":294969550},"http":{"id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/sub-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c60cac8-c3db-4212-a3a7-2bc6e24f56b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49478","PortSpecifier":{"PortValue":49478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49478","PortSpecifier":{"PortValue":49478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657033,"nanos":334434828},"http":{"id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","method":"GET","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PfsMIU1AJJJ8ow2b_B3OVLUCp9GCMUV0nzukKB28sV6ze9wHDNnrmh1fhBtk"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PfsMIU1AJJJ8ow2b_B3OVLUCp9GCMUV0nzukKB28sV6ze9wHDNnrmh1fhBtk\"}"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd224131-8080-47aa-b89c-ca969e24adef","keyName":"e2e-sub-iso-25058b","subscription":"e2e-a-only-843ec1","tenant":"e2e-shared-a-937cca","userId":"cd224131-8080-47aa-b89c-ca969e24adef","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/sub-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-843ec1"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"490dcb1f-2464-4798-9ef0-0c613ce1f38a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf46e478-fde4-4083-9d6f-f4de33665adb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657033,"nanos":377741301},"http":{"id":"bf46e478-fde4-4083-9d6f-f4de33665adb","method":"GET","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IFX19bEJ7EYwU0BO_XcCMz6cqNnrht6yW4220Quw79Vm39SKNdfQjgmlq9V0"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IFX19bEJ7EYwU0BO_XcCMz6cqNnrht6yW4220Quw79Vm39SKNdfQjgmlq9V0\"}"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80207b50-0138-42ff-a92e-02d083cd6082","keyName":"e2e-sub-iso-99dd25","subscription":"e2e-b-only-843ec1","tenant":"e2e-shared-b-3505cb","userId":"80207b50-0138-42ff-a92e-02d083cd6082","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/sub-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-843ec1"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf46e478-fde4-4083-9d6f-f4de33665adb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46170","PortSpecifier":{"PortValue":46170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1819f66e-5e44-42da-8366-8141d8bd51a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46170","PortSpecifier":{"PortValue":46170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657052,"nanos":52976662},"http":{"id":"1819f66e-5e44-42da-8366-8141d8bd51a7","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/sub-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1819f66e-5e44-42da-8366-8141d8bd51a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32800","PortSpecifier":{"PortValue":32800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32800","PortSpecifier":{"PortValue":32800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657052,"nanos":90978552},"http":{"id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/sub-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"758ce940-b3ad-4e5d-ac3b-1d17790788dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40f90cd2-9120-4604-9680-61fcac4387ac","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657052,"nanos":124568006},"http":{"id":"40f90cd2-9120-4604-9680-61fcac4387ac","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NbiJYDevtr8m92fT_LX5l6lDQujWzYA4Opt0Ua2XSrTZFf6rKlNV7A2bzvGp"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NbiJYDevtr8m92fT_LX5l6lDQujWzYA4Opt0Ua2XSrTZFf6rKlNV7A2bzvGp\"}"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"08baefae-8508-45f7-9d06-fdf76d3ae82c","keyName":"e2e-sub-iso-fc80f7","subscription":"e2e-shared-sub-871d16","tenant":"e2e-shared-a-937cca","userId":"08baefae-8508-45f7-9d06-fdf76d3ae82c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/sub-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-871d16"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f90cd2-9120-4604-9680-61fcac4387ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32812","PortSpecifier":{"PortValue":32812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:32812","PortSpecifier":{"PortValue":32812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657052,"nanos":154320671},"http":{"id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yBRsoxKZYISYycY5_gZIyng5DjxrFaLWtbbInXhBXo5cTlseFaqjibprGq8Z"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yBRsoxKZYISYycY5_gZIyng5DjxrFaLWtbbInXhBXo5cTlseFaqjibprGq8Z\"}"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a8666d28-34d8-437a-b6fe-0a131ddcd2b5","keyName":"e2e-sub-iso-ec24a7","subscription":"e2e-shared-sub-871d16","tenant":"e2e-shared-b-3505cb","userId":"a8666d28-34d8-437a-b6fe-0a131ddcd2b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/sub-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-871d16"} {"level":"info","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:17:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5768470-d3c0-46ac-b406-0e02f2a2cb83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3796d42628c71e224db0f189bac4babf4b03ad51839260158d7a0ba3ca735de"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21d6d217703f2eb7abe95451c4f704942bdf01f37ee8df442eda2a2e680d81d7"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d821fa227d3fe71af2a97f30a5d2a87b443cc1c29b50adece2898d55bf968675"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d64fa04404eb4791bde94733bb11925c7b79b830f19b60ad879428cee169efc"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5491a0651550accc20c3f0ee2ac9892610ddc2dde60fdd919f6f2fa651ee61a1"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576968d5ccd85e4b80009b5caf15d0a0cc3a5a4374ba5c55804cb1cc74492086"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d0f8aadccfbafe35eebdd3c2b74b275f2c32572c67df5cd9202661a659348e5"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7446497d5d31a8d6b407a7a0012d0d1deeb20e37c44c087c4928d16e4c8dfae3"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5225f61a7fc18dbbbcbe5204407683368bce97d11795eff50230928ce939e5a0"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4b62c82102c195d5a548b78442d09215de6a0880b4cec7c786985b276636e8"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90d34b5679e3a0d04130a50a43a63e30cb5ed75d063c5ea817274f3ebb7d15cb"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cc6f12629ba5adb51c1d4a7c39a0c00292b97acbe12b3429c28983d2c070d8"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df54a20f2c09b62812ff1b27eac21b6a411d4898edb6027b1441a3797ae651c3"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1cf86ccae29065a2bb2d9fb1adb3e51141c7fdad44327e2901700a56a8c612"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b5e0333ae511d1a012fd0f16e7a1659be4380d057c9a066639f356370730dd2"} {"level":"info","ts":"2026-07-10T04:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/554ae17bbe56b9c496178b91c663ab291d442c7316e83379c2e9e56962c7791a"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"} {"level":"info","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:17:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"error","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"error","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:17:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"debug","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"error","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"error","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"error","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":237467939},"http":{"id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39898","PortSpecifier":{"PortValue":39898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39898","PortSpecifier":{"PortValue":39898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":279241896},"http":{"id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48834","PortSpecifier":{"PortValue":48834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4407efa-63e8-4237-a96b-f4df4724cb70","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48834","PortSpecifier":{"PortValue":48834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":322360645},"http":{"id":"f4407efa-63e8-4237-a96b-f4df4724cb70","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6c48b73-5509-411c-95b1-d239fd513147","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657129,"nanos":388019977},"http":{"id":"d6c48b73-5509-411c-95b1-d239fd513147","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6c48b73-5509-411c-95b1-d239fd513147","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6c48b73-5509-411c-95b1-d239fd513147","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6c48b73-5509-411c-95b1-d239fd513147","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657130,"nanos":445613162},"http":{"id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":453835499},"http":{"id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52102","PortSpecifier":{"PortValue":52102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52102","PortSpecifier":{"PortValue":52102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":491656630},"http":{"id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17652217-5e60-4502-af8e-fa780e239b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57940","PortSpecifier":{"PortValue":57940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17652217-5e60-4502-af8e-fa780e239b77","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17652217-5e60-4502-af8e-fa780e239b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57940","PortSpecifier":{"PortValue":57940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":546424509},"http":{"id":"17652217-5e60-4502-af8e-fa780e239b77","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17652217-5e60-4502-af8e-fa780e239b77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17652217-5e60-4502-af8e-fa780e239b77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17652217-5e60-4502-af8e-fa780e239b77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657144,"nanos":592354140},"http":{"id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657145,"nanos":632192166},"http":{"id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","method":"POST","path":"/ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb/v1/completions","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657145,"nanos":667642518},"http":{"id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11DK5lzqMMlVLnuV8_DQ3eGb4J1AULJeGXxAonMc0aylUt3eq6yq41gULogvj"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11DK5lzqMMlVLnuV8_DQ3eGb4J1AULJeGXxAonMc0aylUt3eq6yq41gULogvj\"}"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","keyName":"e2e-rate-b-8f0604","subscription":"e2e-rate-iso-b-8f0604","tenant":"e2e-shared-b-3505cb","userId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\",\"requestedSubscription\":\"e2e-rate-iso-b-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3505cb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8f0604","namespace":"ai-tenant-e2e-shared-b-3505cb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8f0604"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","keyName":"e2e-rate-b-8f0604","selected_subscription":"e2e-rate-iso-b-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-b-3505cb/e2e-rate-iso-b-8f0604@ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3505cb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8f0604","namespace":"ai-tenant-e2e-shared-b-3505cb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"} {"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"} {"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"} {"level":"info","ts":"2026-07-10T04:19:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"} {"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"} {"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"} {"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"} {"level":"info","ts":"2026-07-10T04:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"} {"level":"info","ts":"2026-07-10T04:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"} {"level":"info","ts":"2026-07-10T04:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"} {"level":"info","ts":"2026-07-10T04:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"}