--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7"} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7"} {"level":"info","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"error","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"error","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"debug","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005"} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117"} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54334","PortSpecifier":{"PortValue":54334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54334","PortSpecifier":{"PortValue":54334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068391,"nanos":777126257},"http":{"id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd789f8-d7c1-46ed-a831-dc19619e7f8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37094","PortSpecifier":{"PortValue":37094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2e58882-7967-47e5-84fe-89f4a226f20b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37094","PortSpecifier":{"PortValue":37094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068391,"nanos":839848319},"http":{"id":"b2e58882-7967-47e5-84fe-89f4a226f20b","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2e58882-7967-47e5-84fe-89f4a226f20b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","method":"GET","path":"/maas-api/v1/api-keys/d26f211b-ca89-4202-b59f-32dfa95e5b69","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068391,"nanos":896056762},"http":{"id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","method":"GET","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d26f211b-ca89-4202-b59f-32dfa95e5b69",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d26f211b-ca89-4202-b59f-32dfa95e5b69",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd9aedab-7d5f-4b26-9515-a2e1fef77cf8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","method":"GET","path":"/maas-api/v1/api-keys/27fabdad-d4d5-4ccc-9fc2-3cfcf47802d4","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068391,"nanos":934972693},"http":{"id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","method":"GET","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/27fabdad-d4d5-4ccc-9fc2-3cfcf47802d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/27fabdad-d4d5-4ccc-9fc2-3cfcf47802d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dc0a25-78d2-49bb-b694-9ad92dab239a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57848","PortSpecifier":{"PortValue":57848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee78c95-431e-41dd-ae92-31d9091522a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57848","PortSpecifier":{"PortValue":57848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068409,"nanos":57554812},"http":{"id":"dee78c95-431e-41dd-ae92-31d9091522a0","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee78c95-431e-41dd-ae92-31d9091522a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35664","PortSpecifier":{"PortValue":35664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35664","PortSpecifier":{"PortValue":35664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068409,"nanos":94754233},"http":{"id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe22cc6e-0e69-4dd2-ac54-4d1f2dfa339d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57852","PortSpecifier":{"PortValue":57852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15597194-96f7-4bec-bf16-397b6acd5ccb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57852","PortSpecifier":{"PortValue":57852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068409,"nanos":138414220},"http":{"id":"15597194-96f7-4bec-bf16-397b6acd5ccb","method":"GET","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-W3H5C86LRkONv2Pl_U2Di0FJTHJxVy05WGR9WnVQy2mJI4Q5d2C11L8Fvfip"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-W3H5C86LRkONv2Pl_U2Di0FJTHJxVy05WGR9WnVQy2mJI4Q5d2C11L8Fvfip\"}"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d34e203a-0827-452c-91d5-4d881943425d","keyName":"e2e-auth-iso-a-ab26d4","subscription":"e2e-auth-iso-8cf74e","tenant":"e2e-shared-a-fdfd38","userId":"d34e203a-0827-452c-91d5-4d881943425d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8cf74e"} {"level":"info","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15597194-96f7-4bec-bf16-397b6acd5ccb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46624","PortSpecifier":{"PortValue":46624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46624","PortSpecifier":{"PortValue":46624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068426,"nanos":260485604},"http":{"id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515d92c0-9eb0-4fa2-9a68-ba7e6e2265ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60682","PortSpecifier":{"PortValue":60682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72e3c81a-1f77-4476-9750-68df8a4d2177","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60682","PortSpecifier":{"PortValue":60682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068426,"nanos":297979381},"http":{"id":"72e3c81a-1f77-4476-9750-68df8a4d2177","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e3c81a-1f77-4476-9750-68df8a4d2177","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60690","PortSpecifier":{"PortValue":60690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60690","PortSpecifier":{"PortValue":60690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068426,"nanos":339634035},"http":{"id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","method":"GET","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PUPpyVzuOhn9zkQX_PN5q1EHIhs4OiZwVGfH8SdU7OLb2lvqDsLSQ4v7y8gz"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PUPpyVzuOhn9zkQX_PN5q1EHIhs4OiZwVGfH8SdU7OLb2lvqDsLSQ4v7y8gz\"}"} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T22:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af99e0bb-a09f-4796-87e0-b6153d80c0f7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39362","PortSpecifier":{"PortValue":39362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068443,"nanos":487189534},"http":{"id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66e9279c-68db-4e86-bc94-7eb7e0ca5297","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34338","PortSpecifier":{"PortValue":34338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34338","PortSpecifier":{"PortValue":34338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068443,"nanos":524654528},"http":{"id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa4ace01-cd10-48b3-a4d5-95ce6c794e71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"003223c1-6395-406e-9022-79dfb33526f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"003223c1-6395-406e-9022-79dfb33526f5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"003223c1-6395-406e-9022-79dfb33526f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068443,"nanos":561477354},"http":{"id":"003223c1-6395-406e-9022-79dfb33526f5","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"003223c1-6395-406e-9022-79dfb33526f5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"003223c1-6395-406e-9022-79dfb33526f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"003223c1-6395-406e-9022-79dfb33526f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"003223c1-6395-406e-9022-79dfb33526f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"003223c1-6395-406e-9022-79dfb33526f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42713478-76de-4f2a-b795-a0dde8f11997","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42713478-76de-4f2a-b795-a0dde8f11997","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42713478-76de-4f2a-b795-a0dde8f11997","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068443,"nanos":599065624},"http":{"id":"42713478-76de-4f2a-b795-a0dde8f11997","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42713478-76de-4f2a-b795-a0dde8f11997","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42713478-76de-4f2a-b795-a0dde8f11997","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42713478-76de-4f2a-b795-a0dde8f11997","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42713478-76de-4f2a-b795-a0dde8f11997","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42713478-76de-4f2a-b795-a0dde8f11997","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db018723-b509-40d9-9637-90d5b3f757dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46764","PortSpecifier":{"PortValue":46764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db018723-b509-40d9-9637-90d5b3f757dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db018723-b509-40d9-9637-90d5b3f757dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46764","PortSpecifier":{"PortValue":46764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068462,"nanos":821378541},"http":{"id":"db018723-b509-40d9-9637-90d5b3f757dc","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db018723-b509-40d9-9637-90d5b3f757dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db018723-b509-40d9-9637-90d5b3f757dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db018723-b509-40d9-9637-90d5b3f757dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db018723-b509-40d9-9637-90d5b3f757dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db018723-b509-40d9-9637-90d5b3f757dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068462,"nanos":857921994},"http":{"id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b5e3cc-9caa-4a3e-9b31-ff0d11ed812e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41112","PortSpecifier":{"PortValue":41112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","method":"GET","path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41112","PortSpecifier":{"PortValue":41112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068462,"nanos":893407099},"http":{"id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","method":"GET","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8488cf-dd84-4ec5-aa50-b432fe500a08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46766","PortSpecifier":{"PortValue":46766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd592dba-2a68-9ea8-9254-4a3920376964","method":"GET","path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46766","PortSpecifier":{"PortValue":46766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068462,"nanos":925705991},"http":{"id":"fd592dba-2a68-9ea8-9254-4a3920376964","method":"GET","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/172040fb-8c65-4fd2-9f30-5423fd948b8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd592dba-2a68-9ea8-9254-4a3920376964","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068482,"nanos":166925132},"http":{"id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ca37069-ab26-4da6-ab04-7ffb0d43bac6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39264","PortSpecifier":{"PortValue":39264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39264","PortSpecifier":{"PortValue":39264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068482,"nanos":206988816},"http":{"id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/auth-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edadc4e8-0430-4cb5-ad64-d46e489d22c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068482,"nanos":240877474},"http":{"id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nUr7N56EThXFztRz_8zSptuYlA82flFoHQNrwJAb0twKJJ32X55zGsppFDXI"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nUr7N56EThXFztRz_8zSptuYlA82flFoHQNrwJAb0twKJJ32X55zGsppFDXI\"}"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e51154e7-b5d3-4083-b71e-cf18dd780d53","keyName":"e2e-auth-iso-a-ce0bbc","subscription":"e2e-auth-iso-afd3c8","tenant":"e2e-shared-a-fdfd38","userId":"e51154e7-b5d3-4083-b71e-cf18dd780d53","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/auth-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-afd3c8"} {"level":"info","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a34154ba-0ea7-45f8-b02f-e5993f4191f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e56cc658959ab2810e9cbdcb56c4052ad9a62fb7eb1dbf1f465621f90f25aaa8"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4d8b2533fb145f9f2bd47d9878ad372215be5887a5cad877caf76d0354be7af"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712fa03e9f21c2d382f48d63809593ccf837dcaeded655a2149db34f55adf271"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e36092228ece0cdd6e88488386217984807a7740f19f5f0d4012c0e32ec0017"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88ca82bbd7feb8a702edc1b0e1859174bf47b3d6db3c5b166aa69f1776aa0169"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/875142e86291361ceef45922a46a0e03b7753c6a4a32ce4cc57773d0cadbd583"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/887ec83b7258ff341683cd1e4ce5f800f65fe907ac47b2893262fe2ee16a6e4d"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec53480eb5358bf0f97f3fbad3097641f7565c321dc3ba7b9691ff13d4e8c3af"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/815b4d69c1e06adb0b8453cb622459813ec0b1c922646eb0483c134394eee73d"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab255c86a2733232b85b01547fe72ae9cc3459a1bba22e9494a22324187e080"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1c56124f082f7e22bc92a12dbceedd9197cfa8102d685d551c17b0cc0a7a103"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cf7fd8d4b533b70b7bc92417a2849698967a5d13d3fbeabeefbcdca03fdff15"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/957c693d7a597e5fd147f18167b26df304ba444a3b41f20f3d8bb8d72a04e005"} {"level":"info","ts":"2026-07-14T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/596a92ee5152af63bde8357ec72c2696e683ada3fdf68a22255f4e9389efb117"} {"level":"info","ts":"2026-07-14T22:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1082074716f0ce8b585cd56e7b6d399e97dc569557cbb0021e8c2d152db45ca2"} {"level":"info","ts":"2026-07-14T22:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b05633eb869f12f1783b77c0e06d4254937af7b1218004f9a62cbd8561410a7"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"error","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2"} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"} {"level":"error","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"} {"level":"debug","ts":"2026-07-14T22:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"error","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"debug","ts":"2026-07-14T22:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"error","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2"} {"level":"info","ts":"2026-07-14T22:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38310","PortSpecifier":{"PortValue":38310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38310","PortSpecifier":{"PortValue":38310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068560,"nanos":325080158},"http":{"id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/sub-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d88b963-7d8c-41f2-bb6a-940716c3383c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba816c3-f0cb-4428-a803-75dd753a38e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068560,"nanos":368041530},"http":{"id":"cba816c3-f0cb-4428-a803-75dd753a38e3","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/sub-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba816c3-f0cb-4428-a803-75dd753a38e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38324","PortSpecifier":{"PortValue":38324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6de793ea-f72a-412c-aa4a-a7d406526293","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38324","PortSpecifier":{"PortValue":38324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068560,"nanos":405775201},"http":{"id":"6de793ea-f72a-412c-aa4a-a7d406526293","method":"GET","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KRaJdOyL8Ss9lUN8_ZU4MP7mhamFqOI4dRnpe1S3Yu4rNw2gHjoA9KzZE4SB"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KRaJdOyL8Ss9lUN8_ZU4MP7mhamFqOI4dRnpe1S3Yu4rNw2gHjoA9KzZE4SB\"}"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"644054e6-baa1-4511-a103-35b7fcb30277","keyName":"e2e-sub-iso-361504","subscription":"e2e-a-only-b887c7","tenant":"e2e-shared-a-fdfd38","userId":"644054e6-baa1-4511-a103-35b7fcb30277","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/sub-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b887c7"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de793ea-f72a-412c-aa4a-a7d406526293","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54870","PortSpecifier":{"PortValue":54870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b57d8afb-e205-4733-a83d-a6f18eedf976","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54870","PortSpecifier":{"PortValue":54870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068560,"nanos":451695634},"http":{"id":"b57d8afb-e205-4733-a83d-a6f18eedf976","method":"GET","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DR5gSatjPtpHAeM0_QRJPwVfsDnCoBASQVF7zcMj7fZvrtFixida8oKMEc49"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DR5gSatjPtpHAeM0_QRJPwVfsDnCoBASQVF7zcMj7fZvrtFixida8oKMEc49\"}"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8271d4b-8272-44bb-936e-3f15ed499459","keyName":"e2e-sub-iso-7d411e","subscription":"e2e-b-only-b887c7","tenant":"e2e-shared-b-32d7b3","userId":"f8271d4b-8272-44bb-936e-3f15ed499459","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/sub-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b887c7"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b57d8afb-e205-4733-a83d-a6f18eedf976","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51922","PortSpecifier":{"PortValue":51922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca83dd93-3d63-4516-8969-a44ceefe8940","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51922","PortSpecifier":{"PortValue":51922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068570,"nanos":469115128},"http":{"id":"ca83dd93-3d63-4516-8969-a44ceefe8940","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/sub-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca83dd93-3d63-4516-8969-a44ceefe8940","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51266","PortSpecifier":{"PortValue":51266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0304516b-6513-4a28-b275-9cc1673db3a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51266","PortSpecifier":{"PortValue":51266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068570,"nanos":504423803},"http":{"id":"0304516b-6513-4a28-b275-9cc1673db3a9","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/sub-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0304516b-6513-4a28-b275-9cc1673db3a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51924","PortSpecifier":{"PortValue":51924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51924","PortSpecifier":{"PortValue":51924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068570,"nanos":541280687},"http":{"id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-enybSWWBOSTc32ia_CrfqXGTD5Jt7iu0imR2FwPX0FtGmX75GVZtnOBT0Ewb"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-enybSWWBOSTc32ia_CrfqXGTD5Jt7iu0imR2FwPX0FtGmX75GVZtnOBT0Ewb\"}"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7dc55c78-f4e8-480e-b519-5010138d2b5d","keyName":"e2e-sub-iso-8902ba","subscription":"e2e-shared-sub-578e5d","tenant":"e2e-shared-a-fdfd38","userId":"7dc55c78-f4e8-480e-b519-5010138d2b5d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/sub-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-578e5d"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7db0901-910d-4256-9a8e-4c1c3c24f0db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e918cecb-4333-41af-a9fa-2f1556022685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51282","PortSpecifier":{"PortValue":51282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e918cecb-4333-41af-a9fa-2f1556022685","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e918cecb-4333-41af-a9fa-2f1556022685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51282","PortSpecifier":{"PortValue":51282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068570,"nanos":570385662},"http":{"id":"e918cecb-4333-41af-a9fa-2f1556022685","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eM1rWiJKYfThX5Ru_UCEIhygtyOIf7FFnl9FBqzpcLKbgWu3ttb7m29XSBzu"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eM1rWiJKYfThX5Ru_UCEIhygtyOIf7FFnl9FBqzpcLKbgWu3ttb7m29XSBzu\"}"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f81176bb-7ed1-4abe-88cc-6aad7352135a","keyName":"e2e-sub-iso-c70b55","subscription":"e2e-shared-sub-578e5d","tenant":"e2e-shared-b-32d7b3","userId":"f81176bb-7ed1-4abe-88cc-6aad7352135a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e918cecb-4333-41af-a9fa-2f1556022685","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/sub-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e918cecb-4333-41af-a9fa-2f1556022685","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-578e5d"} {"level":"info","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e918cecb-4333-41af-a9fa-2f1556022685","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e918cecb-4333-41af-a9fa-2f1556022685","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:36:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8269eaad67ffefebd7f29c902f0a1ea4fc81df46e6bd32f65701ee41fea01cd3"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d8f323cf6328856315506fe432d007fe2580e6742636fb7fe915f9b38a5af77"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d66d71aa2937e6343ffe7cc59c7c86aec2ef6f730bc101bee0ac06f9eb84e03d"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71cf138cd5ba3bf7525a3c21f5ff08e5804e80dc4c71a40e97e759e15ba29ed2"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3731b548556bf097f8caf5e94378462c39d63d59bd4b7f74aa95bebac875cdf"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/860d3c78715cf9eb70e67431cfeeaf8ab696e693e4236d16ac97421f3bf1fe27"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9966f22b9177a157bc324d51114d3d220d4119c2db72ee7133c6781f3ae4355e"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdbdb30eefbd6fdc7c55f84aa679554db6d30ea56e012215c6505fec01aefa72"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3007ec2c78f798c15b9b53c90f5e30e9c3a141ac81b1e29b626743d03508fe"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4315bed5e3d15beaf8b1abdd61ac35944d39832b9b96854589f44ced88b309df"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/162b967e3589a532cbe4754640eb47b6b1357339e46b0a6504b298ed26c794ae"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e65660fb7faa404f207400d6786a4c7ed364c159c46e9b7517a288334949239"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55b26c34fd50b753d988c3ee4faec2a8be6e354ec59f0400202cf0e6877f5512"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304c78fe1e40c0c5eff3e473b71066cae9118485dbd1a6ba2a60d09c6fee7805"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9334d7dc9c99d63471e26bf6b6f719b539926d851ffec70fd9e3e537949b9471"} {"level":"info","ts":"2026-07-14T22:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2562fc575196fc04d4bab21ee82068f0f3cc33eb65642ffbc77ab32a2e4d03af"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"info","ts":"2026-07-14T22:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3"} {"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59220","PortSpecifier":{"PortValue":59220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"797cd67c-f42e-48f3-a8f5-4db346804870","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59220","PortSpecifier":{"PortValue":59220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":866305944},"http":{"id":"797cd67c-f42e-48f3-a8f5-4db346804870","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40002","PortSpecifier":{"PortValue":40002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40002","PortSpecifier":{"PortValue":40002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":905570648},"http":{"id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b09101d-efa8-41ea-847a-551827b89031","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b09101d-efa8-41ea-847a-551827b89031","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b09101d-efa8-41ea-847a-551827b89031","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":942358535},"http":{"id":"1b09101d-efa8-41ea-847a-551827b89031","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b09101d-efa8-41ea-847a-551827b89031","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b09101d-efa8-41ea-847a-551827b89031","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b09101d-efa8-41ea-847a-551827b89031","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068628,"nanos":993738835},"http":{"id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59244","PortSpecifier":{"PortValue":59244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59244","PortSpecifier":{"PortValue":59244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068630,"nanos":33295660},"http":{"id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60226","PortSpecifier":{"PortValue":60226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60226","PortSpecifier":{"PortValue":60226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068642,"nanos":913351975},"http":{"id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f732aaf-0337-438a-b000-f33ff58eb653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068642,"nanos":961420048},"http":{"id":"2f732aaf-0337-438a-b000-f33ff58eb653","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068643,"nanos":2761727},"http":{"id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3468451c-af73-4cc0-b395-fe381565bbdd","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068644,"nanos":40883011},"http":{"id":"3468451c-af73-4cc0-b395-fe381565bbdd","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068645,"nanos":83167053},"http":{"id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43964","PortSpecifier":{"PortValue":43964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","method":"POST","path":"/ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3/v1/completions","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43964","PortSpecifier":{"PortValue":43964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068645,"nanos":122085162},"http":{"id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VwqQJHBxcSe5Mxw5_pijC29XB2mKsGiacBVoKcM2KN37NeLBGUCyiagyErCk"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VwqQJHBxcSe5Mxw5_pijC29XB2mKsGiacBVoKcM2KN37NeLBGUCyiagyErCk\"}"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9167015-0269-4987-b321-98ce8981c12a","keyName":"e2e-rate-b-d8d660","subscription":"e2e-rate-iso-b-d8d660","tenant":"e2e-shared-b-32d7b3","userId":"a9167015-0269-4987-b321-98ce8981c12a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\",\"requestedSubscription\":\"e2e-rate-iso-b-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-32d7b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d8d660","namespace":"ai-tenant-e2e-shared-b-32d7b3","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d8d660"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9167015-0269-4987-b321-98ce8981c12a","keyName":"e2e-rate-b-d8d660","selected_subscription":"e2e-rate-iso-b-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-b-32d7b3/e2e-rate-iso-b-d8d660@ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-32d7b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d8d660","namespace":"ai-tenant-e2e-shared-b-32d7b3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"} {"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"} {"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"} {"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3"} {"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"} {"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2"} {"level":"info","ts":"2026-07-14T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"} {"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"} {"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"} {"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"} {"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}