--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f"} {"level":"debug","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f"} {"level":"debug","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f"} {"level":"info","ts":"2026-07-10T00:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8551980a4f11e6675cb63fb5bb04ac843df51438863549f9e043c06b75a6374"} {"level":"info","ts":"2026-07-10T00:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a30d6e7cc53c041f29b3f971a40b1f08773a102992e94a51a82890dfaeb0e252"} {"level":"info","ts":"2026-07-10T00:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4401b799ea87d4ddba99ed15286d104ed6423fd8ec234014c4b3011eb592b80"} {"level":"info","ts":"2026-07-10T00:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21cdce607edc83cae2e269046fe884fbafcf2bd3547dff6c196eb48f62edfa08"} {"level":"info","ts":"2026-07-10T00:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9bb5e2d8a9d6a6e5160484af87630e3bb9e8d5d189645e9054f3359a56d5ecf"} {"level":"info","ts":"2026-07-10T00:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2266834e75c33ddf7e788163b38e31d2a8e2fb127cfc5fd3a8013d50254971ba"} {"level":"info","ts":"2026-07-10T00:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15222e60329c2c8909517a325ba3fffc52063d0f20dfa5b9e88c7f30470a695f"} {"level":"info","ts":"2026-07-10T00:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e46d4cef025d38eea891e5eea318b051959ce613ad0c79f46f21b5d8d34a8e7"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817"} {"level":"debug","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"debug","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4"} {"level":"debug","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8"} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8"} {"level":"error","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:03:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"} {"level":"info","ts":"2026-07-10T00:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56226","PortSpecifier":{"PortValue":56226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56226","PortSpecifier":{"PortValue":56226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641790,"nanos":121776262},"http":{"id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f2ebe98-ce0b-4315-9676-177d32edcbfa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57120","PortSpecifier":{"PortValue":57120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57120","PortSpecifier":{"PortValue":57120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641790,"nanos":178689543},"http":{"id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6472a7-082e-4dcc-a2f4-2311a465745f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56242","PortSpecifier":{"PortValue":56242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","method":"GET","path":"/maas-api/v1/api-keys/c9d2eaaa-85be-4e4e-b178-73eb0e20978a","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56242","PortSpecifier":{"PortValue":56242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641790,"nanos":238768362},"http":{"id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","method":"GET","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9d2eaaa-85be-4e4e-b178-73eb0e20978a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9d2eaaa-85be-4e4e-b178-73eb0e20978a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d18c6bc-0bfd-4a27-96ed-7bae54d7083c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57128","PortSpecifier":{"PortValue":57128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","method":"GET","path":"/maas-api/v1/api-keys/972689ab-7473-4947-a19e-471eea475dda","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57128","PortSpecifier":{"PortValue":57128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641790,"nanos":281879325},"http":{"id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","method":"GET","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/972689ab-7473-4947-a19e-471eea475dda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/972689ab-7473-4947-a19e-471eea475dda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e07fdd9-4473-4b18-9daf-e975d7a2a825","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e0b993-b275-4965-84f7-fc686574669d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37158","PortSpecifier":{"PortValue":37158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80e0b993-b275-4965-84f7-fc686574669d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e0b993-b275-4965-84f7-fc686574669d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37158","PortSpecifier":{"PortValue":37158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641805,"nanos":156205805},"http":{"id":"80e0b993-b275-4965-84f7-fc686574669d","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80e0b993-b275-4965-84f7-fc686574669d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80e0b993-b275-4965-84f7-fc686574669d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e0b993-b275-4965-84f7-fc686574669d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e0b993-b275-4965-84f7-fc686574669d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e0b993-b275-4965-84f7-fc686574669d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41002","PortSpecifier":{"PortValue":41002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cf73804-8c13-45ee-a994-11090c3071a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41002","PortSpecifier":{"PortValue":41002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641805,"nanos":193899079},"http":{"id":"6cf73804-8c13-45ee-a994-11090c3071a8","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf73804-8c13-45ee-a994-11090c3071a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641805,"nanos":247311232},"http":{"id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","method":"GET","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W3Eq38cIdzaPnPPa_4IzBaFojXm9ImFLkt43UVpRK7lDXm0pK7xY0nq4Qtwi"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W3Eq38cIdzaPnPPa_4IzBaFojXm9ImFLkt43UVpRK7lDXm0pK7xY0nq4Qtwi\"}"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"785e2a80-12e3-412d-b39c-ce327745d58e","keyName":"e2e-auth-iso-a-1b0a56","subscription":"e2e-auth-iso-bf3cae","tenant":"e2e-shared-a-4c394e","userId":"785e2a80-12e3-412d-b39c-ce327745d58e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-bf3cae"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09a400f6-9b82-432e-9e09-c533eacdd5bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54842","PortSpecifier":{"PortValue":54842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54842","PortSpecifier":{"PortValue":54842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641820,"nanos":148676953},"http":{"id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92efe458-8f27-437b-95b4-da0ebe5dd1bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44500","PortSpecifier":{"PortValue":44500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44500","PortSpecifier":{"PortValue":44500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641820,"nanos":184392535},"http":{"id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e41c034f-d838-47ed-8d0a-9eafcfaaa23a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44510","PortSpecifier":{"PortValue":44510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"223d4f9b-0079-4a22-bd92-138646034d4c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44510","PortSpecifier":{"PortValue":44510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641820,"nanos":220304525},"http":{"id":"223d4f9b-0079-4a22-bd92-138646034d4c","method":"GET","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wVbKarshxiQJlEm7_TGzQ8xkTwee4ejF48wNM8aD7AeSdfL4bEIA0WdpL6SB"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wVbKarshxiQJlEm7_TGzQ8xkTwee4ejF48wNM8aD7AeSdfL4bEIA0WdpL6SB\"}"} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T00:03:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"223d4f9b-0079-4a22-bd92-138646034d4c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58116","PortSpecifier":{"PortValue":58116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58116","PortSpecifier":{"PortValue":58116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641835,"nanos":100259224},"http":{"id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36feaa95-1f3a-4ccd-b191-2fd7f3ed15e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"203c719d-56d0-4725-8337-907b4db4e64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37910","PortSpecifier":{"PortValue":37910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"203c719d-56d0-4725-8337-907b4db4e64c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"203c719d-56d0-4725-8337-907b4db4e64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37910","PortSpecifier":{"PortValue":37910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641835,"nanos":133234455},"http":{"id":"203c719d-56d0-4725-8337-907b4db4e64c","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"203c719d-56d0-4725-8337-907b4db4e64c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"203c719d-56d0-4725-8337-907b4db4e64c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"203c719d-56d0-4725-8337-907b4db4e64c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"203c719d-56d0-4725-8337-907b4db4e64c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"203c719d-56d0-4725-8337-907b4db4e64c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641835,"nanos":166727548},"http":{"id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fca2670f-f364-4df0-a1e0-70d7cf1702b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37914","PortSpecifier":{"PortValue":37914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37914","PortSpecifier":{"PortValue":37914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641835,"nanos":202504479},"http":{"id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"074dcab1-392b-4b48-9a2b-c5d00fc75930","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51642","PortSpecifier":{"PortValue":51642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8728686-630b-470e-9170-c0c90a4a41b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51642","PortSpecifier":{"PortValue":51642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641850,"nanos":151785006},"http":{"id":"e8728686-630b-470e-9170-c0c90a4a41b6","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8728686-630b-470e-9170-c0c90a4a41b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641850,"nanos":191058981},"http":{"id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"099cb85a-e6cf-4c68-8190-f8e8513eca1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"166f5acc-bf44-422f-901f-d93914989eb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40046","PortSpecifier":{"PortValue":40046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"166f5acc-bf44-422f-901f-d93914989eb8","method":"GET","path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"166f5acc-bf44-422f-901f-d93914989eb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40046","PortSpecifier":{"PortValue":40046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641850,"nanos":227496319},"http":{"id":"166f5acc-bf44-422f-901f-d93914989eb8","method":"GET","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"166f5acc-bf44-422f-901f-d93914989eb8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"166f5acc-bf44-422f-901f-d93914989eb8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"166f5acc-bf44-422f-901f-d93914989eb8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"166f5acc-bf44-422f-901f-d93914989eb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"166f5acc-bf44-422f-901f-d93914989eb8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51648","PortSpecifier":{"PortValue":51648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","method":"GET","path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51648","PortSpecifier":{"PortValue":51648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641850,"nanos":265176469},"http":{"id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","method":"GET","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/65030767-49cc-4124-a4cd-2e4ef15ee4c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19655b28-ab41-4b45-8bf9-66bfd56691e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ca727c-3909-4252-a089-20cd2254f178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98ca727c-3909-4252-a089-20cd2254f178","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ca727c-3909-4252-a089-20cd2254f178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641869,"nanos":392575108},"http":{"id":"98ca727c-3909-4252-a089-20cd2254f178","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98ca727c-3909-4252-a089-20cd2254f178","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98ca727c-3909-4252-a089-20cd2254f178","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ca727c-3909-4252-a089-20cd2254f178","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ca727c-3909-4252-a089-20cd2254f178","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ca727c-3909-4252-a089-20cd2254f178","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0278df4a-1415-406c-8b20-68f08d27b824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0278df4a-1415-406c-8b20-68f08d27b824","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0278df4a-1415-406c-8b20-68f08d27b824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641869,"nanos":451247266},"http":{"id":"0278df4a-1415-406c-8b20-68f08d27b824","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0278df4a-1415-406c-8b20-68f08d27b824","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0278df4a-1415-406c-8b20-68f08d27b824","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/auth-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0278df4a-1415-406c-8b20-68f08d27b824","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0278df4a-1415-406c-8b20-68f08d27b824","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0278df4a-1415-406c-8b20-68f08d27b824","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34150","PortSpecifier":{"PortValue":34150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b047c830-32e2-4314-bf23-30ccea3475c4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34150","PortSpecifier":{"PortValue":34150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641869,"nanos":488900822},"http":{"id":"b047c830-32e2-4314-bf23-30ccea3475c4","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U4KQuEeiytOqIilx_dUlilrV2UBLI17ZVHSl0wLiyZnWyxiTNbHtNMpYabri"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U4KQuEeiytOqIilx_dUlilrV2UBLI17ZVHSl0wLiyZnWyxiTNbHtNMpYabri\"}"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c518c003-7b2f-49ba-8a64-b9eacfdfaec6","keyName":"e2e-auth-iso-a-8649fc","subscription":"e2e-auth-iso-1220bd","tenant":"e2e-shared-a-4c394e","userId":"c518c003-7b2f-49ba-8a64-b9eacfdfaec6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/auth-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1220bd"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b047c830-32e2-4314-bf23-30ccea3475c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fb5b0e9f5481a67e17502da9ca6380ce8b0596f89dd24dbc57eede8d2f33817"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5343c8a8e4bb46fb1a09a2116bfefdafab98f9618efc70ae04330339c1ac4022"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b38ebb29b0fb0e3f60b33cedeb906edbf981c0a46e1bc058a0d96e143e7008"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fcfe354fe93a80b885eab2ae028d7562179a4752fb2248b242b3a960afb9bcb"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88d944a41956de4956c81c55352b103c3ec752d005832b9d73c34512598c9f67"} {"level":"info","ts":"2026-07-10T00:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26d90a0335ee33d54c3c8fa6cdcafcf489c7fe3ae7f53cbee7e2423907132d81"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e1d2f4624af3b23d821f970199dbd8f00ab53cf4e40cabd61c6612159bb78f7"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04006340bc8af862732f6fa6f3bc7ba6216a6b445ffd25a753ba3daa228466a4"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a0a430f3e5ebf71436d6371581cd279ae728a67b529f8f508849eba92eab129"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9350c94d8038c2b88942558e874a7e812bf81fa2cbbcaff57ff8fc1683eb424a"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15c22ccf64a52bd1ebf81e41cce81aac55a7733da197ae60cabb051649188f81"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aac19c6a37c783e1535cc9faea6246a45a14b5dabd1ded01c62ec87acaf78f2"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941cb30c99fa3ffffa6c41b0ea2a8b034b7aef10ae7a8ceec55d9d7335894cda"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17413a7259e33d83dc1bfb1614d9a3994ce00e3803c256e6410f5cc89f53fbfc"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/376b483b3788d3916eb4e0053c07d76880122acedee6e941e8f5ee4c25ba35f8"} {"level":"info","ts":"2026-07-10T00:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e578cd3eca57e723e656f205f176975678143584dd5235c0e6b67b8bcf86cbd"} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"debug","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"info","ts":"2026-07-10T00:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"error","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"debug","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf"} {"level":"info","ts":"2026-07-10T00:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"} {"level":"debug","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"info","ts":"2026-07-10T00:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46754","PortSpecifier":{"PortValue":46754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46754","PortSpecifier":{"PortValue":46754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641917,"nanos":660041826},"http":{"id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/sub-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"393e4bf9-a7ee-4362-8bb6-6991adbd3757","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641917,"nanos":714883240},"http":{"id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/sub-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74ef88a-c86a-4a65-ba37-2f1485c3e05e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46768","PortSpecifier":{"PortValue":46768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6919fa99-cfcd-4536-8bb7-c576e694d665","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46768","PortSpecifier":{"PortValue":46768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641917,"nanos":748784708},"http":{"id":"6919fa99-cfcd-4536-8bb7-c576e694d665","method":"GET","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8uA3labAzc1ngk50_FTWr1SWoYRmQWtFgrdfeIB5cYUyMpTUxWiqJkziwIUO"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8uA3labAzc1ngk50_FTWr1SWoYRmQWtFgrdfeIB5cYUyMpTUxWiqJkziwIUO\"}"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4c5b39a-8d2d-48cb-af6f-e9a26d51a41d","keyName":"e2e-sub-iso-28aa7e","subscription":"e2e-a-only-c1c461","tenant":"e2e-shared-a-4c394e","userId":"a4c5b39a-8d2d-48cb-af6f-e9a26d51a41d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/sub-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c1c461"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6919fa99-cfcd-4536-8bb7-c576e694d665","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04f2d067-4db5-4d49-a173-edb72fb7f718","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43742","PortSpecifier":{"PortValue":43742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641917,"nanos":775363792},"http":{"id":"04f2d067-4db5-4d49-a173-edb72fb7f718","method":"GET","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dJRntm3igjQsnnFu_jrIYD4o2FztDrH1aUrOpcGsFeQBSLuGfv07YXA27Rxu"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dJRntm3igjQsnnFu_jrIYD4o2FztDrH1aUrOpcGsFeQBSLuGfv07YXA27Rxu\"}"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d781d5e-b2fa-4a4a-80ac-4745854ab505","keyName":"e2e-sub-iso-bfd328","subscription":"e2e-b-only-c1c461","tenant":"e2e-shared-b-b0ecf1","userId":"3d781d5e-b2fa-4a4a-80ac-4745854ab505","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/sub-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c1c461"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f2d067-4db5-4d49-a173-edb72fb7f718","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58640","PortSpecifier":{"PortValue":58640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64a996cb-9b98-4d3e-911a-138f135c358d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58640","PortSpecifier":{"PortValue":58640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641929,"nanos":851932606},"http":{"id":"64a996cb-9b98-4d3e-911a-138f135c358d","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/sub-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64a996cb-9b98-4d3e-911a-138f135c358d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46566","PortSpecifier":{"PortValue":46566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46566","PortSpecifier":{"PortValue":46566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641929,"nanos":892614587},"http":{"id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/sub-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c961bef-d5b8-4be7-95e7-5bb3a54a01ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58656","PortSpecifier":{"PortValue":58656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58656","PortSpecifier":{"PortValue":58656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641929,"nanos":929707901},"http":{"id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NlK4VePkxfFjcWid_xiw4vjaKlUWC94PlUudqjequ7scoDOvq8gXRBaLbR5N"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NlK4VePkxfFjcWid_xiw4vjaKlUWC94PlUudqjequ7scoDOvq8gXRBaLbR5N\"}"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7edfc9a7-fa18-4b10-a8d6-2dd18d9ccd26","keyName":"e2e-sub-iso-527bfc","subscription":"e2e-shared-sub-778b60","tenant":"e2e-shared-a-4c394e","userId":"7edfc9a7-fa18-4b10-a8d6-2dd18d9ccd26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/sub-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-778b60"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be20375a-ce58-4334-a69b-bfab96a8d4cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46576","PortSpecifier":{"PortValue":46576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46576","PortSpecifier":{"PortValue":46576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641929,"nanos":979044971},"http":{"id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BplyhGcT69Dx03Ki_mNxDQ26VFwxToIB1MhPuXYY6Bi2NrC8LN40ZS6ISYZd"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BplyhGcT69Dx03Ki_mNxDQ26VFwxToIB1MhPuXYY6Bi2NrC8LN40ZS6ISYZd\"}"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dffa6de6-8448-4a76-b6df-432727a947d8","keyName":"e2e-sub-iso-0126ea","subscription":"e2e-shared-sub-778b60","tenant":"e2e-shared-b-b0ecf1","userId":"dffa6de6-8448-4a76-b6df-432727a947d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/sub-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-778b60"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e5cea14-a39f-433d-bf4c-2e5af8069587","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/192a39165ade7358d00a690ab6c6b796d3ef937221062a65529d86dd2ad560ff"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d631c930541b6df3150c7f2e608b7800dcbbc5f3ce48891f9f3cd1cac87892fa"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f600136c069e06f323dccbfaa312545d9e53768ae978f114f09baae9a7319b79"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c638d8f853cca32e187e957e6ef9a37b2131d0a69ae83fbd4e0a0cdec1d139ba"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/451917301623929d1e6002254654bcfee53e95bcefbd491d7aa266d0cf4c7e3d"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/579568034785317c66b205f83f9ab2f2fed46055295e80f965d70d739848384b"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77fe5adbda53fb34cab54aae3551fd0ee1b3d9060193fb49f6778b9a95dc9c5b"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/572bfd75b677acd652d85e3454a3076634aac96ec43e9233b8266878ef8b7d49"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/312edc01fc3a5a5866537c049db35fd0bb429cd10836a78b3c96e154676bcfdf"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57764e792ff0312b200a4db77baf467e3f32c9d677748d38d80eb773441f15c2"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2b68aeb1ecba1c827c865f4603e3eaf68bfaaf5675a16cf25fe9872358a9983"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d87d431dc70a6dfbad4956801d6336dadf4dd81935ff34796c4ebad8b0703716"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d804b050ffa97818a514a226fb7c232eeed604938eda9c2a1bf4a70937b2f282"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d65aea77b906fca47542dded7135441948b5bd7e6966d04e7e5804f23d247ed"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2d5a568ccea80c78dc46b15e4c01c831e4c96b03e6b5afb07c85ac7fc34561"} {"level":"info","ts":"2026-07-10T00:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e36e6746b7c11ebdeb89b90a5e5cf9e73d5a20c90e93a468ab327c5db3bdb24"} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"debug","ts":"2026-07-10T00:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"error","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"info","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797"} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb"} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797"} {"level":"debug","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb"} {"level":"info","ts":"2026-07-10T00:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"debug","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"debug","ts":"2026-07-10T00:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T00:06:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T00:06:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35638","PortSpecifier":{"PortValue":35638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35638","PortSpecifier":{"PortValue":35638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641995,"nanos":531226314},"http":{"id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfc41304-8b8b-4dd8-8b5f-2923fc7b3b47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57454","PortSpecifier":{"PortValue":57454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b53d5612-3e9d-4a74-9f32-4430900242ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57454","PortSpecifier":{"PortValue":57454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641995,"nanos":570461045},"http":{"id":"b53d5612-3e9d-4a74-9f32-4430900242ee","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b53d5612-3e9d-4a74-9f32-4430900242ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35646","PortSpecifier":{"PortValue":35646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35646","PortSpecifier":{"PortValue":35646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641995,"nanos":605871938},"http":{"id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3\"}"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","subscription":"e2e-rate-iso-a-1d05a3","tenant":"e2e-shared-a-4c394e","userId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-1d05a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d05a3"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","selected_subscription":"e2e-rate-iso-a-1d05a3","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-1d05a3@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"237b3402-48ae-4ffb-aa1e-83aa517501cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35660","PortSpecifier":{"PortValue":35660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35660","PortSpecifier":{"PortValue":35660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641996,"nanos":666743112},"http":{"id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3\"}"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","subscription":"e2e-rate-iso-a-1d05a3","tenant":"e2e-shared-a-4c394e","userId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-1d05a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d05a3"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","selected_subscription":"e2e-rate-iso-a-1d05a3","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-1d05a3@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9856686b-bc93-46bb-bd47-12e7b78cd9a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35668","PortSpecifier":{"PortValue":35668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fbe7dc2-f795-49f1-9082-9e8024632319","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35668","PortSpecifier":{"PortValue":35668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783641997,"nanos":702420057},"http":{"id":"8fbe7dc2-f795-49f1-9082-9e8024632319","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SAdLXZndTWnsre0a_juoghq1gGg7TLY1uRwsLUaa169rYdWoEF1BchyLKui3\"}"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","subscription":"e2e-rate-iso-a-1d05a3","tenant":"e2e-shared-a-4c394e","userId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-1d05a3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1d05a3"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5aaa566-c038-4bc2-a6e1-4452bda2f826","keyName":"e2e-rate-a-1d05a3","selected_subscription":"e2e-rate-iso-a-1d05a3","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-1d05a3@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1d05a3","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fbe7dc2-f795-49f1-9082-9e8024632319","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51312","PortSpecifier":{"PortValue":51312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4108ce1d-50c4-4d18-b001-57ad33579639","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51312","PortSpecifier":{"PortValue":51312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642010,"nanos":661178828},"http":{"id":"4108ce1d-50c4-4d18-b001-57ad33579639","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4108ce1d-50c4-4d18-b001-57ad33579639","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf7db016-7f61-4438-a17b-9798d3355334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42158","PortSpecifier":{"PortValue":42158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf7db016-7f61-4438-a17b-9798d3355334","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf7db016-7f61-4438-a17b-9798d3355334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42158","PortSpecifier":{"PortValue":42158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642010,"nanos":705473748},"http":{"id":"cf7db016-7f61-4438-a17b-9798d3355334","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf7db016-7f61-4438-a17b-9798d3355334","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"]}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf7db016-7f61-4438-a17b-9798d3355334","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3878db99a5fb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8cf6e0fb-7a05-4a4c-ab05-0eecfe25dfe1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"04ef4ef7-5770-4090-a4fa-6cd8bb518b49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf7db016-7f61-4438-a17b-9798d3355334","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf7db016-7f61-4438-a17b-9798d3355334","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf7db016-7f61-4438-a17b-9798d3355334","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642010,"nanos":742527496},"http":{"id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF\"}"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","subscription":"e2e-rate-iso-a-c458e5","tenant":"e2e-shared-a-4c394e","userId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-c458e5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c458e5"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","selected_subscription":"e2e-rate-iso-a-c458e5","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-c458e5@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"311b5aad-f52f-40b7-9b81-d1330e1e0db8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489fe346-9a60-481e-ac81-0212e950199b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"489fe346-9a60-481e-ac81-0212e950199b","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489fe346-9a60-481e-ac81-0212e950199b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51328","PortSpecifier":{"PortValue":51328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642011,"nanos":786282881},"http":{"id":"489fe346-9a60-481e-ac81-0212e950199b","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF\"}"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","subscription":"e2e-rate-iso-a-c458e5","tenant":"e2e-shared-a-4c394e","userId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-c458e5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"489fe346-9a60-481e-ac81-0212e950199b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c458e5"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489fe346-9a60-481e-ac81-0212e950199b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","selected_subscription":"e2e-rate-iso-a-c458e5","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-c458e5@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489fe346-9a60-481e-ac81-0212e950199b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489fe346-9a60-481e-ac81-0212e950199b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04faf0c2-51af-444e-b454-8b235d398452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04faf0c2-51af-444e-b454-8b235d398452","method":"POST","path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions","host":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04faf0c2-51af-444e-b454-8b235d398452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642012,"nanos":821158777},"http":{"id":"04faf0c2-51af-444e-b454-8b235d398452","method":"POST","headers":{":authority":"e2e-shared-a-4c394e.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-454EfjrjMwKQXasD_xhO1eYtcfMZmA6RP9ki2wHBO1Vn5pOQxVNXWnFBldhF\"}"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","subscription":"e2e-rate-iso-a-c458e5","tenant":"e2e-shared-a-4c394e","userId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\",\"requestedSubscription\":\"e2e-rate-iso-a-c458e5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4c394e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04faf0c2-51af-444e-b454-8b235d398452","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c458e5"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04faf0c2-51af-444e-b454-8b235d398452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fa63cc0a-83fa-4e7e-b09e-2752054d8960","keyName":"e2e-rate-a-c458e5","selected_subscription":"e2e-rate-iso-a-c458e5","selected_subscription_key":"ai-tenant-e2e-shared-a-4c394e/e2e-rate-iso-a-c458e5@ai-tenant-e2e-shared-a-4c394e/rate-test-model-4c394e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4c394e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c458e5","namespace":"ai-tenant-e2e-shared-a-4c394e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04faf0c2-51af-444e-b454-8b235d398452","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04faf0c2-51af-444e-b454-8b235d398452","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42174","PortSpecifier":{"PortValue":42174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","method":"POST","path":"/ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1/v1/completions","host":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42174","PortSpecifier":{"PortValue":42174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783642012,"nanos":857996351},"http":{"id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","method":"POST","headers":{":authority":"e2e-shared-b-b0ecf1.apps.cb1e19f2-7bdf-41df-bbc5-3878db99a5fb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zFRI6nJtR2fw3f8t_a2EbmHF9FqPtK5vqxSF1iCf3wM6HqW0tXOadqqxZxd8"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zFRI6nJtR2fw3f8t_a2EbmHF9FqPtK5vqxSF1iCf3wM6HqW0tXOadqqxZxd8\"}"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f702daa-7493-4852-a856-6bce62551e6e","keyName":"e2e-rate-b-c458e5","subscription":"e2e-rate-iso-b-c458e5","tenant":"e2e-shared-b-b0ecf1","userId":"1f702daa-7493-4852-a856-6bce62551e6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1\",\"requestedSubscription\":\"e2e-rate-iso-b-c458e5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0ecf1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b0ecf1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c458e5","namespace":"ai-tenant-e2e-shared-b-b0ecf1","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c458e5"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f702daa-7493-4852-a856-6bce62551e6e","keyName":"e2e-rate-b-c458e5","selected_subscription":"e2e-rate-iso-b-c458e5","selected_subscription_key":"ai-tenant-e2e-shared-b-b0ecf1/e2e-rate-iso-b-c458e5@ai-tenant-e2e-shared-b-b0ecf1/rate-test-model-b0ecf1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b0ecf1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c458e5","namespace":"ai-tenant-e2e-shared-b-b0ecf1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T00:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc36521c-1fc1-458f-99b4-c48bee789c7f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T00:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb71b9f398d7b6aa430431bb04942046771bba02be1bafa92f8bb0bc83a45f7f"} {"level":"info","ts":"2026-07-10T00:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0243cff49759e65feb65bb74959930b26d04dff01f1cedd96ee5d0906ebc3a5b"} {"level":"info","ts":"2026-07-10T00:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/991fa92fcfbfbc158b19997dbd2919e87cb2ca56d8bd68a6a14b3234d12ff2b7"} {"level":"info","ts":"2026-07-10T00:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65b097bafd80ad090ff229d0442001d66db8f89a949b89f5ca64508fb1762d78"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c06b12a160161d66c4b975791031ce566a36ad66d0caf5ff061b3af13f09440"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a30e9ef09d8c26bd2af3dfbc24eb72b6dbfb2438e495c86850631c1b220f689a"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f5056d0182dfeed3f0d3e99435e947fd41f73e59f519591dfb59cd2fe8b8cb"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72ef313c415f104f3db34557fdac221f39067662a76611e4bb4b3c77195d2f04"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69ad4e052d9e612680a6e1ed65af70c8880db5f49c383a5c3aae418f550b797"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db6c9c6f22fa5337d36e21c40f62b530e6f851ee64599d7457a9da86f90611fb"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83987d561491c037b0b1dc908a48c23543d81c64cc4542a977ba1c9f88308314"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44bff35b7d83a4ccad5423e27262754f0aa9be4002df3904089e74f6d58edb10"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54b4b692f2b16533aa228859c5a35e10b436367686aff31fd203a043adc9c71a"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea459baf66b4b89f21ded0f14c77c2ddb8af4f5abfbee97b25e23dbbdaf96476"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbab865ad6fa7d1a8dbb33156ce5687c58a8a5ae3851a46774ef544acae09ab1"} {"level":"info","ts":"2026-07-10T00:07:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/194e85ac6a81f584643da5a0f7763a56abaaa14cbed4213c3ec234eed635145a"} {"level":"info","ts":"2026-07-10T00:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27ac386bbe2b3de7308cba160c52e8177c5ebdefa6be209c4b2ed3c407be62c1"} {"level":"info","ts":"2026-07-10T00:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc3a312932f30a8c4eecc4a220249e348786ba7669013578382e44b296b80acb"} {"level":"info","ts":"2026-07-10T00:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7b8974363a4ecc5e5c8253f9bec80e01747dcf0968c677e2b48909f2ee0181f"} {"level":"info","ts":"2026-07-10T00:07:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4309fcb3098da83a21f616c8db79fc1a4911c71303ae6b258667a75a6eb4532d"} {"level":"info","ts":"2026-07-10T00:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/881425b0455b40387c8283ed702ce9a6625cab71a717bbf1c304a330ba62f7cd"} {"level":"info","ts":"2026-07-10T00:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59252a5631f6896c5a5ee19b362104fea2553dcbe2f44957fd1f30068d0831aa"} {"level":"info","ts":"2026-07-10T00:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d2650bef43995a303cd56aa2f3040f9f22f46f3e8a11ecb26c3bde14b7161e9"} {"level":"info","ts":"2026-07-10T00:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b489436a5c4343e60f3c744e164e30406a3f85ffc970e0d9541f91fee47cdc40"}