--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"info","ts":"2026-07-17T19:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a452aecb8cadb916b08061d8f95041f6a12c14e1dda3da0ddf059487262ca0ef"} {"level":"info","ts":"2026-07-17T19:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7d4a73cee033d5f5524d7723669cad1c1b6774f29b4beb75dfe93e9f9b3887e"} {"level":"info","ts":"2026-07-17T19:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24e96c976337ace294c5cd09ef7afb3fffb481c521d2ed92691f0cefa1401673"} {"level":"info","ts":"2026-07-17T19:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c19d21d4e0b405fd6e19d05afea51113ad6f067d6abab502d45a768b8eb683"} {"level":"info","ts":"2026-07-17T19:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a03e04467f2d3db982562d8498e9cc961cdbff39f08c3e15beb3b6f94a70d905"} {"level":"info","ts":"2026-07-17T19:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/201734b58eeddcff53d99e90e1d060eafe564a55b5d6ed1f62dec7649a3986ab"} {"level":"info","ts":"2026-07-17T19:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5064ba2f834bbe03d98d0851cb1e260d8f6480e692c4aa8cf2efc68f1e1c2224"} {"level":"info","ts":"2026-07-17T19:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2fb335ddd0a994c38ce7302a08cc63dc9b0e55b6137c5f7a5110c33a0466482"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"error","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:35:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"error","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"debug","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df"} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:36:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316967,"nanos":606370983},"http":{"id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6e05ff-7827-4d8e-bb5c-e4988cb2d09d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35932","PortSpecifier":{"PortValue":35932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35932","PortSpecifier":{"PortValue":35932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316967,"nanos":671681997},"http":{"id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fbc3340-9813-4fc1-8d49-2d4aeb6abd92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56936","PortSpecifier":{"PortValue":56936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"907d9221-f925-4621-bac2-9ef80fff6ea6","method":"GET","path":"/maas-api/v1/api-keys/fb9a0535-ef6f-43c1-96b4-c254e51bf06e","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56936","PortSpecifier":{"PortValue":56936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316967,"nanos":731229022},"http":{"id":"907d9221-f925-4621-bac2-9ef80fff6ea6","method":"GET","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fb9a0535-ef6f-43c1-96b4-c254e51bf06e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fb9a0535-ef6f-43c1-96b4-c254e51bf06e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"907d9221-f925-4621-bac2-9ef80fff6ea6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35942","PortSpecifier":{"PortValue":35942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","method":"GET","path":"/maas-api/v1/api-keys/0786081e-840b-425d-a1f5-e9dacfb24ca6","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35942","PortSpecifier":{"PortValue":35942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316967,"nanos":770059619},"http":{"id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","method":"GET","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0786081e-840b-425d-a1f5-e9dacfb24ca6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0786081e-840b-425d-a1f5-e9dacfb24ca6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf58d3ed-2efe-44a5-b23c-7e999bf86c3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44450","PortSpecifier":{"PortValue":44450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5e7021b-6e19-49ab-8406-ff5be337e898","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44450","PortSpecifier":{"PortValue":44450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316986,"nanos":929561044},"http":{"id":"c5e7021b-6e19-49ab-8406-ff5be337e898","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5e7021b-6e19-49ab-8406-ff5be337e898","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38140","PortSpecifier":{"PortValue":38140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38140","PortSpecifier":{"PortValue":38140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316986,"nanos":968540596},"http":{"id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88794ac3-25ba-4a23-9d87-0b0d6185d89a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44452","PortSpecifier":{"PortValue":44452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44452","PortSpecifier":{"PortValue":44452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784316987,"nanos":6575624},"http":{"id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","method":"GET","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10QfzcFTMvqO27TrD_3Ckubtbn2CDwUIkSLcHwbj8lYhu1IvAPLjZHTWhy473"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10QfzcFTMvqO27TrD_3Ckubtbn2CDwUIkSLcHwbj8lYhu1IvAPLjZHTWhy473\"}"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4538da5b-8604-41ec-bf8d-11dc9999dac3","keyName":"e2e-auth-iso-a-a1c57c","subscription":"e2e-auth-iso-61567b","tenant":"e2e-shared-a-b3dd7f","userId":"4538da5b-8604-41ec-bf8d-11dc9999dac3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-61567b"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c40226-4cf3-4b0a-a2f8-dfda6b4ffa60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48158","PortSpecifier":{"PortValue":48158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48158","PortSpecifier":{"PortValue":48158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317006,"nanos":119324024},"http":{"id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a53d54ff-e533-91db-b7c0-44b79bc35e26","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56380","PortSpecifier":{"PortValue":56380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac46e917-b91c-4594-a14f-4e75e116c522","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56380","PortSpecifier":{"PortValue":56380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317006,"nanos":157989650},"http":{"id":"ac46e917-b91c-4594-a14f-4e75e116c522","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac46e917-b91c-4594-a14f-4e75e116c522","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ebe796d-198a-44b4-855e-675f015593e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56384","PortSpecifier":{"PortValue":56384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ebe796d-198a-44b4-855e-675f015593e4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ebe796d-198a-44b4-855e-675f015593e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56384","PortSpecifier":{"PortValue":56384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317006,"nanos":195818057},"http":{"id":"1ebe796d-198a-44b4-855e-675f015593e4","method":"GET","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11N6ku71nAtkOnmtq_Ef41a2cnGI6EPIvcQCwbB0e9f9xtkdVAA2pWY11iZqS"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11N6ku71nAtkOnmtq_Ef41a2cnGI6EPIvcQCwbB0e9f9xtkdVAA2pWY11iZqS\"}"} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ebe796d-198a-44b4-855e-675f015593e4","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1ebe796d-198a-44b4-855e-675f015593e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ebe796d-198a-44b4-855e-675f015593e4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T19:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ebe796d-198a-44b4-855e-675f015593e4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1219e689-18bd-4161-beec-7748b032c5ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59374","PortSpecifier":{"PortValue":59374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1219e689-18bd-4161-beec-7748b032c5ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1219e689-18bd-4161-beec-7748b032c5ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59374","PortSpecifier":{"PortValue":59374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317023,"nanos":342881331},"http":{"id":"1219e689-18bd-4161-beec-7748b032c5ff","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1219e689-18bd-4161-beec-7748b032c5ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1219e689-18bd-4161-beec-7748b032c5ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1219e689-18bd-4161-beec-7748b032c5ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1219e689-18bd-4161-beec-7748b032c5ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1219e689-18bd-4161-beec-7748b032c5ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49098","PortSpecifier":{"PortValue":49098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49098","PortSpecifier":{"PortValue":49098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317023,"nanos":380518808},"http":{"id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd2fa09-9e7d-4c49-a812-7897c39ed72f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59382","PortSpecifier":{"PortValue":59382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59382","PortSpecifier":{"PortValue":59382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317023,"nanos":415886293},"http":{"id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76dd51e-0f9c-48d2-bb7d-9e4e69f5be13","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccb10200-faba-4aad-aaa0-886d22d248a7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317023,"nanos":455577265},"http":{"id":"ccb10200-faba-4aad-aaa0-886d22d248a7","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccb10200-faba-4aad-aaa0-886d22d248a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55806","PortSpecifier":{"PortValue":55806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55806","PortSpecifier":{"PortValue":55806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317040,"nanos":461921650},"http":{"id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb2c114a-f9e7-42a8-bebb-c956b2ca5dce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39394","PortSpecifier":{"PortValue":39394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39394","PortSpecifier":{"PortValue":39394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317040,"nanos":497865773},"http":{"id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9994fa1-0f6e-4739-9b2c-3e837ec1ce7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","method":"GET","path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317040,"nanos":535278451},"http":{"id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","method":"GET","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09b9b56-acf1-4db9-b98a-fbcd9180b98a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55818","PortSpecifier":{"PortValue":55818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","method":"GET","path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55818","PortSpecifier":{"PortValue":55818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317040,"nanos":565301517},"http":{"id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","method":"GET","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dd45d3d-f291-41ee-9d33-e524bc08ee81",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27c1ab5a-025c-4060-9ae9-4f83f8e0b722","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60622","PortSpecifier":{"PortValue":60622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60622","PortSpecifier":{"PortValue":60622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317059,"nanos":635476757},"http":{"id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92d40a2b-79be-425f-ba1f-1694e98f8f60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317059,"nanos":671070611},"http":{"id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/auth-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303e0f6c-ae9c-41f4-8c44-60c3f6e4ba2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60636","PortSpecifier":{"PortValue":60636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60636","PortSpecifier":{"PortValue":60636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317059,"nanos":705639030},"http":{"id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LOd5FgaZEfQy0u4W_8meuM2JIiHMrTzzdKcAcBkTgdSi38xeKI87ADN7iiCv"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LOd5FgaZEfQy0u4W_8meuM2JIiHMrTzzdKcAcBkTgdSi38xeKI87ADN7iiCv\"}"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e9fe5eb-18ef-42d5-8a09-cbbc2f565555","keyName":"e2e-auth-iso-a-0f541c","subscription":"e2e-auth-iso-a93b5e","tenant":"e2e-shared-a-b3dd7f","userId":"3e9fe5eb-18ef-42d5-8a09-cbbc2f565555","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/auth-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a93b5e"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ed5bfd-7ddb-48e3-b114-38f5d1ae46bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57f1f57daaa8b837b6fe04dd3853f1d2057ae46ce50b195cf1943ac0206577df"} {"level":"info","ts":"2026-07-17T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab3250062349b86eac207b47274d52fe334160ad1521e8fc06ce33f277cf9a6b"} {"level":"info","ts":"2026-07-17T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e0d6e4d44583012e2acf5f4a7ed27c9fb800a5801d4b718ba883e345d11a9f4"} {"level":"info","ts":"2026-07-17T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2c695691084a50788376c07d08d99365d660c73afd738509fcf00e045c491ca"} {"level":"info","ts":"2026-07-17T19:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/928f1286297264599177b627d75ba3745dcc4e7cc9b31d9f2621fd6947690bdd"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dccfbc5c3a56a1ea0d3dd40da87192231dff0a3033d94fe415264035349c2a1"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7d0d6d52a6fddb3c62b1fe2af830b8b8765e4eb11d55261f12cddbf52bcf6df"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677fed93ba02c05e4722cf30d475f0da8f4e10d395f40387cf8bdeb6f846b41b"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c9424a2a9ee4190bd402091c1fa865e9c3010bb30df39b5aa3917738f4c1c0"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61fed0263ef5fec57f17e42ce72174d8af3caf0a033db6b96aa4b79c510ead72"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97168b18a4547a27b8935b150e5e3a8e7f8b4bfa237963cffd15f8f3bd97ae8f"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96dbb7f0b332a98d4d6d0aa40e0fa96039ac4e69b9b1e9cf68010a06543ecfdc"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed26ee21c5bc8000179fd68de257d5a179e5624ef373224c8d7c533aec69417"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/678cd950cac015297000cd39534dfd3cd9d55553a422bb0ebe3016199cb4ea6b"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb9f4f5bbb6a13d79f4aee2857270047de8deb05f101cd03fea2d5ce4039daf"} {"level":"info","ts":"2026-07-17T19:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97e7834d33d06db14576d0b1c5eb75ac3fbb916195631c6e25de883014d0dddc"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"info","ts":"2026-07-17T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61"} {"level":"info","ts":"2026-07-17T19:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"} {"level":"info","ts":"2026-07-17T19:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"error","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"} {"level":"error","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"debug","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59052","PortSpecifier":{"PortValue":59052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59052","PortSpecifier":{"PortValue":59052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317129,"nanos":509171825},"http":{"id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/sub-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"201a24a1-082b-4f7d-8aa1-52734067a9ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39458","PortSpecifier":{"PortValue":39458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39458","PortSpecifier":{"PortValue":39458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317129,"nanos":553938940},"http":{"id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/sub-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f8da9f-4f0a-4e6c-b924-a1738606dde5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59054","PortSpecifier":{"PortValue":59054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317129,"nanos":593750449},"http":{"id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","method":"GET","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ro1ZP9aH01Sy95Sp_NmuUAkM7RVvkoSSqR7U5T1jxRJuXzVXpBjQbdei22b1"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ro1ZP9aH01Sy95Sp_NmuUAkM7RVvkoSSqR7U5T1jxRJuXzVXpBjQbdei22b1\"}"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83325ad3-a33e-48bc-ab67-c9ee5ba21e59","keyName":"e2e-sub-iso-bc98db","subscription":"e2e-a-only-432108","tenant":"e2e-shared-a-b3dd7f","userId":"83325ad3-a33e-48bc-ab67-c9ee5ba21e59","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/sub-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-432108"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b121a5-c0a9-4ad5-a1da-b5a09330782a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317129,"nanos":633697236},"http":{"id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","method":"GET","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zNRNLracHasadagQ_HzxgdUzJyUolpm6sgMqBhGqCtuSMgwE0gD1qMQQsxhR"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zNRNLracHasadagQ_HzxgdUzJyUolpm6sgMqBhGqCtuSMgwE0gD1qMQQsxhR\"}"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"95f0487a-e747-49ab-a678-4704e2f94e38","keyName":"e2e-sub-iso-8bef16","subscription":"e2e-b-only-432108","tenant":"e2e-shared-b-79d51b","userId":"95f0487a-e747-49ab-a678-4704e2f94e38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/sub-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-432108"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9916e498-fd43-4aca-bbcf-cc850c4e7673","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57680","PortSpecifier":{"PortValue":57680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57680","PortSpecifier":{"PortValue":57680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317143,"nanos":770585955},"http":{"id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/sub-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8356daa-df0c-4245-b8ed-f34b4ec177ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33236","PortSpecifier":{"PortValue":33236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33236","PortSpecifier":{"PortValue":33236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317143,"nanos":810299788},"http":{"id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/sub-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b60899-b0b8-4cd4-a879-8a3b8e35598f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57684","PortSpecifier":{"PortValue":57684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57684","PortSpecifier":{"PortValue":57684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317143,"nanos":848558335},"http":{"id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-66erDZyG1bB769YG_qzmigp0MvIVUvr4DhBlIxi8lSHmhr1xNxPAEtdF2Fkt"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-66erDZyG1bB769YG_qzmigp0MvIVUvr4DhBlIxi8lSHmhr1xNxPAEtdF2Fkt\"}"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"05747579-f820-4980-9629-e5809d299965","keyName":"e2e-sub-iso-3e0de6","subscription":"e2e-shared-sub-9a257a","tenant":"e2e-shared-a-b3dd7f","userId":"05747579-f820-4980-9629-e5809d299965","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/sub-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9a257a"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f1eeee-7570-4d92-a63b-9a97d6d6c26a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33238","PortSpecifier":{"PortValue":33238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8767e466-08c9-431a-89dc-be7c04ccb27c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33238","PortSpecifier":{"PortValue":33238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317143,"nanos":882396487},"http":{"id":"8767e466-08c9-431a-89dc-be7c04ccb27c","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12784IQbrHRm74I3g_5UPjdWQ3Bi7SZ52ZLZvT1K4c6881nXBkrWQDUoixBs5"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12784IQbrHRm74I3g_5UPjdWQ3Bi7SZ52ZLZvT1K4c6881nXBkrWQDUoixBs5\"}"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"442d3501-d305-4b89-ba5f-3a047ab25fbb","keyName":"e2e-sub-iso-bf0e05","subscription":"e2e-shared-sub-9a257a","tenant":"e2e-shared-b-79d51b","userId":"442d3501-d305-4b89-ba5f-3a047ab25fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/sub-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9a257a"} {"level":"info","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8767e466-08c9-431a-89dc-be7c04ccb27c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7d53e04d48ec1bc16a7190f37bd36b16029cea7e4c0c75d2f6c812adae713b7"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d3e5260a5fe4c13d411349272ed3cbd3b357927bd7b14fd2515607499e04892"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efd62ffa91d8dd6d716c4e6b676847ac552870ed2cd236e005eaeedbb84b519f"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42352df474603506aa2537d1badf9096f1770f00f3063f19a58f46244e6dac77"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ad044761f591517272a8fc66b286f8b823a77f2a1490ea2b04e9fcffad635ee"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b994e3c721226f63a0ef34ceff1caf869b433d7363b5ff1d8e1067d9867cdd61"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33fe3ea74ccb4465be8d76e9ebde4a13d505bdddb5ae832ca8fb21591a6ff683"} {"level":"info","ts":"2026-07-17T19:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9834e782b34c87b40f79e094f7c3257d7ac9d7e301150c3b471e38026990faf7"} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"error","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23fc5c061ff6e4bdc3f9605e4f35e96fdf78d43286557cddd452f782ebfc540b"} {"level":"info","ts":"2026-07-17T19:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89a0955ee46419092cb3e887893c52daa11284076a3b6b835aef5818333c020"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1dfc0590bde3402c88284b12a87cabbec46fbf466153eb3773f6f44cdb5ec9d"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d633d2165d8cb95bacd7f9ad2d61b2928fd4d8d2747f854927fab1cdf0a1f8f0"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b7cb3f7362a121ce43f4a8faa029b92ddb45a87965966af436cc5e56419d81"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f14bb8a547ba2ad5583467ccf82ce287ec185b58ed03392b248c0446fa20240"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e3945c5dc53fa3a34a15ec918978f69f51dd059b3bb54faae70d88967017aa5"} {"level":"info","ts":"2026-07-17T19:39:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f368f43cfcbd38aea8b62019f4cef52998a5c437033ec21417cbbd7af02894c6"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"error","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"error","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"debug","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:40:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T19:40:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T19:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36608","PortSpecifier":{"PortValue":36608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36608","PortSpecifier":{"PortValue":36608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317211,"nanos":323072864},"http":{"id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a2f3f94-eb5a-48d4-9bb2-43bba985421f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55804","PortSpecifier":{"PortValue":55804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"779212d4-6a17-4bbc-8648-03aaf596752e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55804","PortSpecifier":{"PortValue":55804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317211,"nanos":361838136},"http":{"id":"779212d4-6a17-4bbc-8648-03aaf596752e","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"779212d4-6a17-4bbc-8648-03aaf596752e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36624","PortSpecifier":{"PortValue":36624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36624","PortSpecifier":{"PortValue":36624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317211,"nanos":402688319},"http":{"id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR\"}"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","subscription":"e2e-rate-iso-a-6925f8","tenant":"e2e-shared-a-b3dd7f","userId":"f55b3f76-e938-4fdd-803d-2f24e029b117","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-6925f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6925f8"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","selected_subscription":"e2e-rate-iso-a-6925f8","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-6925f8@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a58e5e8f-f06f-4514-b2aa-f9706645de3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36634","PortSpecifier":{"PortValue":36634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36634","PortSpecifier":{"PortValue":36634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317212,"nanos":463689687},"http":{"id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR\"}"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","subscription":"e2e-rate-iso-a-6925f8","tenant":"e2e-shared-a-b3dd7f","userId":"f55b3f76-e938-4fdd-803d-2f24e029b117","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-6925f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6925f8"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","selected_subscription":"e2e-rate-iso-a-6925f8","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-6925f8@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1a654b0-60ff-4e69-b0e0-55cf418eef40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f0237a-9573-431b-9b24-d026765a2448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36638","PortSpecifier":{"PortValue":36638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50f0237a-9573-431b-9b24-d026765a2448","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50f0237a-9573-431b-9b24-d026765a2448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36638","PortSpecifier":{"PortValue":36638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317213,"nanos":498896583},"http":{"id":"50f0237a-9573-431b-9b24-d026765a2448","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AhOqjml1nDdcR8Sb_e8nTJGeTOTIazvV8WsBxbJJh93vpeDhq1CzMbEiQaZR\"}"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","subscription":"e2e-rate-iso-a-6925f8","tenant":"e2e-shared-a-b3dd7f","userId":"f55b3f76-e938-4fdd-803d-2f24e029b117","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-6925f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50f0237a-9573-431b-9b24-d026765a2448","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6925f8"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50f0237a-9573-431b-9b24-d026765a2448","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f55b3f76-e938-4fdd-803d-2f24e029b117","keyName":"e2e-rate-a-6925f8","selected_subscription":"e2e-rate-iso-a-6925f8","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-6925f8@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6925f8","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f0237a-9573-431b-9b24-d026765a2448","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50f0237a-9573-431b-9b24-d026765a2448","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47332","PortSpecifier":{"PortValue":47332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47332","PortSpecifier":{"PortValue":47332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317226,"nanos":353440775},"http":{"id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c1bc0b7-ce17-4437-961c-87760d4cabf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32886","PortSpecifier":{"PortValue":32886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b83f68b-b6bc-4541-9312-f3dded158e46","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32886","PortSpecifier":{"PortValue":32886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317226,"nanos":393984674},"http":{"id":"6b83f68b-b6bc-4541-9312-f3dded158e46","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"]}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4448e52a4fc6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e11a87de-074b-433e-83f4-c78bf7ff0f9a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62ee47b-e816-4c69-b1d1-997c3e862350","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b83f68b-b6bc-4541-9312-f3dded158e46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ce8e2d0-b364-47d6-a971-677951dc8456","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317226,"nanos":432452288},"http":{"id":"0ce8e2d0-b364-47d6-a971-677951dc8456","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf\"}"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","subscription":"e2e-rate-iso-a-45f6cf","tenant":"e2e-shared-a-b3dd7f","userId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-45f6cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-45f6cf"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","selected_subscription":"e2e-rate-iso-a-45f6cf","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-45f6cf@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ce8e2d0-b364-47d6-a971-677951dc8456","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317227,"nanos":472898518},"http":{"id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf\"}"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","subscription":"e2e-rate-iso-a-45f6cf","tenant":"e2e-shared-a-b3dd7f","userId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-45f6cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-45f6cf"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","selected_subscription":"e2e-rate-iso-a-45f6cf","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-45f6cf@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c84abe-fc3d-452e-9e73-e2351f9629cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47350","PortSpecifier":{"PortValue":47350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","method":"POST","path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions","host":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47350","PortSpecifier":{"PortValue":47350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317228,"nanos":511932232},"http":{"id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","method":"POST","headers":{":authority":"e2e-shared-a-b3dd7f.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-USuElgMqht5CHXiD_OhdMdRrotyTHvi3zwuaufdETNdETF9xPLgjI5kIXbLf\"}"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","subscription":"e2e-rate-iso-a-45f6cf","tenant":"e2e-shared-a-b3dd7f","userId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\",\"requestedSubscription\":\"e2e-rate-iso-a-45f6cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3dd7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3dd7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-45f6cf"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e9a91ae9-4e9b-43a5-8bc2-92d0d0756cc7","keyName":"e2e-rate-a-45f6cf","selected_subscription":"e2e-rate-iso-a-45f6cf","selected_subscription_key":"ai-tenant-e2e-shared-a-b3dd7f/e2e-rate-iso-a-45f6cf@ai-tenant-e2e-shared-a-b3dd7f/rate-test-model-b3dd7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3dd7f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-45f6cf","namespace":"ai-tenant-e2e-shared-a-b3dd7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"484d2ecd-75ba-4a03-9daa-d961e712f6fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","method":"POST","path":"/ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b/v1/completions","host":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784317228,"nanos":550432175},"http":{"id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","method":"POST","headers":{":authority":"e2e-shared-b-79d51b.apps.894ff318-b320-4e5e-b5c1-4448e52a4fc6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VT4RRIqqOo9pkj8i_3BXuX4gUStqXVOcvLkYi976JqaIk2k6iD8RbfUIH3eJ"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VT4RRIqqOo9pkj8i_3BXuX4gUStqXVOcvLkYi976JqaIk2k6iD8RbfUIH3eJ\"}"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de571c2f-bae4-443e-ba2a-33f342d33238","keyName":"e2e-rate-b-45f6cf","subscription":"e2e-rate-iso-b-45f6cf","tenant":"e2e-shared-b-79d51b","userId":"de571c2f-bae4-443e-ba2a-33f342d33238","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b\",\"requestedSubscription\":\"e2e-rate-iso-b-45f6cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79d51b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-79d51b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-45f6cf","namespace":"ai-tenant-e2e-shared-b-79d51b","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79d51b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-45f6cf"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de571c2f-bae4-443e-ba2a-33f342d33238","keyName":"e2e-rate-b-45f6cf","selected_subscription":"e2e-rate-iso-b-45f6cf","selected_subscription_key":"ai-tenant-e2e-shared-b-79d51b/e2e-rate-iso-b-45f6cf@ai-tenant-e2e-shared-b-79d51b/rate-test-model-79d51b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-79d51b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-45f6cf","namespace":"ai-tenant-e2e-shared-b-79d51b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T19:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28df9e70-b807-4ad4-bd88-47c2b54572b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T19:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ef29d91af3c335155acc88e7331493a4029202fcfb524189aa50d6a4178d3c6"} {"level":"info","ts":"2026-07-17T19:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7755884d7ffa09559879adde37c19c257507ee14b4ce898e81b9393523c55c37"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f208cd62f1366e7ad8b4f6b8eff5a5ebad918ea9b11b057c9b185cb60b0bb4dd"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310ac8e44ab83731e159664190e2b2b76fba762941080e0a8831ba7e41110ee0"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15e564ca61502f33067ca547bd2acfb7a24396de76ff075bc4c9ef14b8545c48"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90282820d22ecd87354b3ff8b960bcb27302e9179fcfbce8cdee5bde8ff2aee3"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182f07537466122ea28625924c5aa940654b361140b7370cd497109052894ee3"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1fab5172d2132be2224b2c5af99b28836292201b75da2e719ef81d5048d9d8"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0417cb5f173aefb6778c288a48245f6eb14b9cdeca5d6853d3ba177d3f10438e"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82bcd424b0525ba7207d4aeec6072631dd93d218433fb22e220da24dcc321212"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4b3546835f81e11693a29f5722ba6aa913f5afcaaea0856fb5c713d334d2188"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9d698f5a1acb7fd2bc7e44fa6ff0107d66ac1bcab3222a89623672670fe6a3"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3a6db2572d1b142cc291d87185ead3dda6815db728eeaf8b00e138f4ddeb55"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce2ec7fb996d6b37933ac0d685a1b54a95e9c0b72bd8ce2b6f04ee20a38dae24"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0168be88e611c304d40d2d0e4c18de1bd72dfd729ea5b04949c2b2159926793c"} {"level":"info","ts":"2026-07-17T19:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4cba270a7fa5fbe75933ffce223f1a49f2121541ebf88f9b93915be78b39c5a"} {"level":"info","ts":"2026-07-17T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47726fdee1bb7aaf6d8b2419dcca8b3bbb99f7a7f57a3a8542aaa62a5c87c453"} {"level":"info","ts":"2026-07-17T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/586b43f6ba46b454b2a72d6dcbf03d4436de68ad7a81ededda2cd1cb53eb49fa"} {"level":"info","ts":"2026-07-17T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a0314df11e454196b66692492c97f1db9dc7fe386dcb1e6740e76462e6c750"} {"level":"info","ts":"2026-07-17T19:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96a624343d7992a6a7d8e1511badc1266fe00156dade12164c674e129eeb9d4a"} {"level":"info","ts":"2026-07-17T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07d9c059e13c6d1497e7a42bb88f21f5ec4044907c559ad95a19d64d3fdf6b9"} {"level":"info","ts":"2026-07-17T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f3d4790d28ff60821935308d2a99bbeeec6b8be6fd07fbe325d3c5a21735988"} {"level":"info","ts":"2026-07-17T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ec027d19789836124c23d2adcbf4650cc292fed6d5fdf42d1142fa85ae4f396"} {"level":"info","ts":"2026-07-17T19:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83c208f094db767d27d7fe722653a6b90fc07649804efdd49a0f07d166410c71"}