--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43286","PortSpecifier":{"PortValue":43286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43286","PortSpecifier":{"PortValue":43286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836856,"nanos":810698863},"http":{"id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0667d4dd-4ddc-4350-8aef-e2992b558fbb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07d682d5-106f-4bf4-8214-9f6a85663d44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836856,"nanos":846008101},"http":{"id":"07d682d5-106f-4bf4-8214-9f6a85663d44","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d682d5-106f-4bf4-8214-9f6a85663d44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43292","PortSpecifier":{"PortValue":43292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43292","PortSpecifier":{"PortValue":43292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836856,"nanos":884021486},"http":{"id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","method":"GET","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HG1tvxI00bnfWvTH_VbAnPaStA4To7QxK5iZXw4uN1QeYc2MPwJpp9rd11OU"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HG1tvxI00bnfWvTH_VbAnPaStA4To7QxK5iZXw4uN1QeYc2MPwJpp9rd11OU\"}"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1dff5394-fc2d-4216-a356-206a7fdd5938","keyName":"e2e-auth-iso-a-d230fa","subscription":"e2e-auth-iso-0951e9","tenant":"e2e-shared-a-fb64e5","userId":"1dff5394-fc2d-4216-a356-206a7fdd5938","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0951e9"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7a3ff8d-79b8-4e57-9500-5403fb182c36","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4086597-dd25-9f48-8e8c-07739485e690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55814","PortSpecifier":{"PortValue":55814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4086597-dd25-9f48-8e8c-07739485e690","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4086597-dd25-9f48-8e8c-07739485e690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55814","PortSpecifier":{"PortValue":55814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836876,"nanos":130216997},"http":{"id":"d4086597-dd25-9f48-8e8c-07739485e690","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4086597-dd25-9f48-8e8c-07739485e690","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4086597-dd25-9f48-8e8c-07739485e690","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4086597-dd25-9f48-8e8c-07739485e690","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4086597-dd25-9f48-8e8c-07739485e690","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4086597-dd25-9f48-8e8c-07739485e690","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60326","PortSpecifier":{"PortValue":60326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bc7a694-0356-41b1-8c02-9f3789104abf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60326","PortSpecifier":{"PortValue":60326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836876,"nanos":169221679},"http":{"id":"5bc7a694-0356-41b1-8c02-9f3789104abf","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc7a694-0356-41b1-8c02-9f3789104abf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836876,"nanos":210749842},"http":{"id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","method":"GET","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BQ3C9lX1nGgRneDA_D8fLpJFigtvjQqMqMhX9VOSukIQPzFv1TSZBWnnSUD0"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BQ3C9lX1nGgRneDA_D8fLpJFigtvjQqMqMhX9VOSukIQPzFv1TSZBWnnSUD0\"}"} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-23T20:01:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff6e59ee-27dd-4cb6-91e2-44b07a8f9dc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-23T20:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"error","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60068","PortSpecifier":{"PortValue":60068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60068","PortSpecifier":{"PortValue":60068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836895,"nanos":471435799},"http":{"id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42221e7f-224e-4b51-ae6e-0f33ef8910b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56880","PortSpecifier":{"PortValue":56880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1298175-c610-4f4b-b2bf-68fef4cce487","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56880","PortSpecifier":{"PortValue":56880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836895,"nanos":505376697},"http":{"id":"d1298175-c610-4f4b-b2bf-68fef4cce487","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1298175-c610-4f4b-b2bf-68fef4cce487","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60078","PortSpecifier":{"PortValue":60078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60078","PortSpecifier":{"PortValue":60078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836895,"nanos":539639360},"http":{"id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95a0c5ad-07b3-4525-8ebc-861fc00539e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b67f570-e409-4765-9396-e1056a7259fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56888","PortSpecifier":{"PortValue":56888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b67f570-e409-4765-9396-e1056a7259fc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b67f570-e409-4765-9396-e1056a7259fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56888","PortSpecifier":{"PortValue":56888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836895,"nanos":581471212},"http":{"id":"8b67f570-e409-4765-9396-e1056a7259fc","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b67f570-e409-4765-9396-e1056a7259fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b67f570-e409-4765-9396-e1056a7259fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b67f570-e409-4765-9396-e1056a7259fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b67f570-e409-4765-9396-e1056a7259fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b67f570-e409-4765-9396-e1056a7259fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"error","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52184","PortSpecifier":{"PortValue":52184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fc26039-45ca-4ddb-a678-478463f5f42f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52184","PortSpecifier":{"PortValue":52184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836912,"nanos":661065628},"http":{"id":"8fc26039-45ca-4ddb-a678-478463f5f42f","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fc26039-45ca-4ddb-a678-478463f5f42f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"653ba27c-dabc-4065-9fe0-6b790b61070b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836912,"nanos":694612533},"http":{"id":"653ba27c-dabc-4065-9fe0-6b790b61070b","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653ba27c-dabc-4065-9fe0-6b790b61070b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47774","PortSpecifier":{"PortValue":47774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64853a89-5354-4b16-9851-b2df2ba31fc0","method":"GET","path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47774","PortSpecifier":{"PortValue":47774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836912,"nanos":730661349},"http":{"id":"64853a89-5354-4b16-9851-b2df2ba31fc0","method":"GET","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64853a89-5354-4b16-9851-b2df2ba31fc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52198","PortSpecifier":{"PortValue":52198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","method":"GET","path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52198","PortSpecifier":{"PortValue":52198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836912,"nanos":760970442},"http":{"id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","method":"GET","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"error","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55b232d8-ae70-418d-9dcf-e48a0bff5284",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d0a8d6-9293-44cf-b701-c276cc0fc814","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:01:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"error","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"error","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"error","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a27328cb-e717-4e86-9de3-807e4641ef08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836929,"nanos":845949106},"http":{"id":"a27328cb-e717-4e86-9de3-807e4641ef08","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27328cb-e717-4e86-9de3-807e4641ef08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57680","PortSpecifier":{"PortValue":57680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57680","PortSpecifier":{"PortValue":57680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836929,"nanos":882209340},"http":{"id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/auth-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ec51cdb-56ae-46ae-a036-4e10f7dff608","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49378","PortSpecifier":{"PortValue":49378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"670e2140-82a5-45a3-b43a-9d5528a66757","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49378","PortSpecifier":{"PortValue":49378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836929,"nanos":918705849},"http":{"id":"670e2140-82a5-45a3-b43a-9d5528a66757","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16rk234taORzxSysJ_PfUy94F7ZCT2LDTtHlFtXbAosGVv2RN69OOHaBcpB81"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16rk234taORzxSysJ_PfUy94F7ZCT2LDTtHlFtXbAosGVv2RN69OOHaBcpB81\"}"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3875ca72-64a8-4a1e-b7eb-0dd4153def0f","keyName":"e2e-auth-iso-a-e9f475","subscription":"e2e-auth-iso-58d2c2","tenant":"e2e-shared-a-fb64e5","userId":"3875ca72-64a8-4a1e-b7eb-0dd4153def0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/auth-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-58d2c2"} {"level":"info","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:02:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670e2140-82a5-45a3-b43a-9d5528a66757","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e473a5c5adb4b3b607d9d790cc1cd79032f4419feb3f2583f1f6d21871cd24b"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/731c68f3d4da0c22c6690e3e5ad941921a4a8c8cafc5b5c677591d8584131398"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb78177c347530d0dca5e7f298cee68ede8fc428e7f09b08fba3c954af5028bb"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39d83583f01886beabd3d7d7158e425fd90bdfe8e6ebaa6bfdd87d3439ce3ad7"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8fc44295d93998a6483e88243f87ab6c500a2b8024665ccb5e1cf5e495ea6"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77d4acd45814f05c4cfdb248de762d1696cff9a16482ec5a830f740425e52c95"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e948ac8ac4bf7adb1e6d51e35286481ae7e463c303959dc0339ea834522a202"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c87a45a55eb32cd68cffd4ce5fa248b179a22fd5bb71ac50196b71aa8cecb70"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d3c0cf590420769d1eeab54c1187b499b64389be65667a262f84f0c3b54ca37"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/044a880178709536b9d0389463dae8f39834813f8ae9cecff1d4e7b8ea344421"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45d5bf54106aa5b5d77df418f5121f1151f81f1f90f27017ff51f89c77a5d2fc"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63450bb0ec0569c1ba5e59ee2b8fc57bb430dd9c0941635d196b849f8ea29ba"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7442694b6cc6e0dbc7cfc64ec4b0efc8496e739610ec7e4b57cfad8f3c539d"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8aeb61ef42c9f4620eb70d86cd2a6587de8a9d11ed735b8eda3043c60bcf7de"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7e272059578ca4b108445dc68c8e643d9b9195ac287da069c2ec5a0621c3fd"} {"level":"info","ts":"2026-07-23T20:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c91829165e924290f5a8960cff353101afbe146813c72d05066e12ea784b4c28"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"error","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3"} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6"} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37922","PortSpecifier":{"PortValue":37922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37922","PortSpecifier":{"PortValue":37922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836987,"nanos":684686693},"http":{"id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/sub-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4a7d212-3ac5-4df7-b2c1-33ab8294ecd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46484dc6-55da-4819-9d56-9b864983020d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40442","PortSpecifier":{"PortValue":40442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46484dc6-55da-4819-9d56-9b864983020d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46484dc6-55da-4819-9d56-9b864983020d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40442","PortSpecifier":{"PortValue":40442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836987,"nanos":722836485},"http":{"id":"46484dc6-55da-4819-9d56-9b864983020d","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46484dc6-55da-4819-9d56-9b864983020d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46484dc6-55da-4819-9d56-9b864983020d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/sub-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46484dc6-55da-4819-9d56-9b864983020d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46484dc6-55da-4819-9d56-9b864983020d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46484dc6-55da-4819-9d56-9b864983020d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37936","PortSpecifier":{"PortValue":37936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28113751-01e1-4c6d-bebd-3bd3c672f874","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37936","PortSpecifier":{"PortValue":37936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836987,"nanos":760634267},"http":{"id":"28113751-01e1-4c6d-bebd-3bd3c672f874","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bLZ0y6rEJkCLTv0H_2QAnDaYjWCjcLRsiCMWqG9hFxg5wu9Lmr0ARk7qt1t1"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bLZ0y6rEJkCLTv0H_2QAnDaYjWCjcLRsiCMWqG9hFxg5wu9Lmr0ARk7qt1t1\"}"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2040e18c-211f-4786-b8f5-bef7c45e2480","keyName":"e2e-sub-iso-59c425","subscription":"e2e-shared-sub-7b27c7","tenant":"e2e-shared-a-fb64e5","userId":"2040e18c-211f-4786-b8f5-bef7c45e2480","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/sub-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7b27c7"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28113751-01e1-4c6d-bebd-3bd3c672f874","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40450","PortSpecifier":{"PortValue":40450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40450","PortSpecifier":{"PortValue":40450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836987,"nanos":790168490},"http":{"id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LwyD0iR3gxvy5CSd_KoA7gb2kmu1XKCjtUuAhClvZg4ujkqF2orupYNxA8D9"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LwyD0iR3gxvy5CSd_KoA7gb2kmu1XKCjtUuAhClvZg4ujkqF2orupYNxA8D9\"}"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b41b702-0521-46e3-a68c-0e262748d6f4","keyName":"e2e-sub-iso-720e8d","subscription":"e2e-shared-sub-7b27c7","tenant":"e2e-shared-b-470e58","userId":"8b41b702-0521-46e3-a68c-0e262748d6f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/sub-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7b27c7"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6"} {"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":276994664},"http":{"id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49774","PortSpecifier":{"PortValue":49774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f96deef-e29d-439f-bf22-7c9521f8f585","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49774","PortSpecifier":{"PortValue":49774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":316706279},"http":{"id":"5f96deef-e29d-439f-bf22-7c9521f8f585","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":352027991},"http":{"id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837059,"nanos":417074678},"http":{"id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a460490-8507-4730-9f3d-47de731c5fd5","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837060,"nanos":454490499},"http":{"id":"6a460490-8507-4730-9f3d-47de731c5fd5","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46072","PortSpecifier":{"PortValue":46072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7a84075-40a4-4479-8f8b-6865848840e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46072","PortSpecifier":{"PortValue":46072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":323051361},"http":{"id":"b7a84075-40a4-4479-8f8b-6865848840e6","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":362583562},"http":{"id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":395765019},"http":{"id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837074,"nanos":429892283},"http":{"id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837075,"nanos":466207127},"http":{"id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39798","PortSpecifier":{"PortValue":39798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","method":"POST","path":"/ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58/v1/completions","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39798","PortSpecifier":{"PortValue":39798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837075,"nanos":498839816},"http":{"id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W1ev7rHyT2fhVTeS_elwOOnz02SP3sjckh7dGXzuOoTni7QHyCNzLmTTEdNI"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W1ev7rHyT2fhVTeS_elwOOnz02SP3sjckh7dGXzuOoTni7QHyCNzLmTTEdNI\"}"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab703e86-6439-4942-b548-eb730e3d1249","keyName":"e2e-rate-b-55e141","subscription":"e2e-rate-iso-b-55e141","tenant":"e2e-shared-b-470e58","userId":"ab703e86-6439-4942-b548-eb730e3d1249","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\",\"requestedSubscription\":\"e2e-rate-iso-b-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-470e58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-55e141","namespace":"ai-tenant-e2e-shared-b-470e58","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58"}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-55e141"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab703e86-6439-4942-b548-eb730e3d1249","keyName":"e2e-rate-b-55e141","selected_subscription":"e2e-rate-iso-b-55e141","selected_subscription_key":"ai-tenant-e2e-shared-b-470e58/e2e-rate-iso-b-55e141@ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-470e58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-55e141","namespace":"ai-tenant-e2e-shared-b-470e58","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"} {"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}