--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5491c9634f69c593223257ae716536146882adc41c025e239a6acdcd598fc2d9"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907"} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1"} {"level":"debug","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"error","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32"} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:54:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:54:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b83a3563-d446-4170-8287-36e15a2a4624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59376","PortSpecifier":{"PortValue":59376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b83a3563-d446-4170-8287-36e15a2a4624","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b83a3563-d446-4170-8287-36e15a2a4624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59376","PortSpecifier":{"PortValue":59376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224453,"nanos":602282634},"http":{"id":"b83a3563-d446-4170-8287-36e15a2a4624","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b83a3563-d446-4170-8287-36e15a2a4624","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b83a3563-d446-4170-8287-36e15a2a4624","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b83a3563-d446-4170-8287-36e15a2a4624","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b83a3563-d446-4170-8287-36e15a2a4624","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b83a3563-d446-4170-8287-36e15a2a4624","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49586","PortSpecifier":{"PortValue":49586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49586","PortSpecifier":{"PortValue":49586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224453,"nanos":667024492},"http":{"id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f3e3a49-0c23-4255-8feb-62fbea04d66f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59378","PortSpecifier":{"PortValue":59378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"439aafa9-d196-4626-95d0-e7a24217bea9","method":"GET","path":"/maas-api/v1/api-keys/56935371-4429-4a11-b93e-df7c72560891","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59378","PortSpecifier":{"PortValue":59378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224453,"nanos":732507683},"http":{"id":"439aafa9-d196-4626-95d0-e7a24217bea9","method":"GET","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56935371-4429-4a11-b93e-df7c72560891",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56935371-4429-4a11-b93e-df7c72560891",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"439aafa9-d196-4626-95d0-e7a24217bea9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49590","PortSpecifier":{"PortValue":49590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","method":"GET","path":"/maas-api/v1/api-keys/f948ee6e-9b93-4626-8201-04819dc2b9e9","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49590","PortSpecifier":{"PortValue":49590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224453,"nanos":774058313},"http":{"id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","method":"GET","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f948ee6e-9b93-4626-8201-04819dc2b9e9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f948ee6e-9b93-4626-8201-04819dc2b9e9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fa41c90-e0c6-44ca-a001-6e2ca28c3279","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"594e0d35-a319-4002-bf0b-4ae36900b137","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224473,"nanos":64787338},"http":{"id":"594e0d35-a319-4002-bf0b-4ae36900b137","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"594e0d35-a319-4002-bf0b-4ae36900b137","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57974","PortSpecifier":{"PortValue":57974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2826e78c-773c-4481-9406-8564e93c2f4b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57974","PortSpecifier":{"PortValue":57974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224473,"nanos":105683567},"http":{"id":"2826e78c-773c-4481-9406-8564e93c2f4b","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2826e78c-773c-4481-9406-8564e93c2f4b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57620","PortSpecifier":{"PortValue":57620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57620","PortSpecifier":{"PortValue":57620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224473,"nanos":147002535},"http":{"id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","method":"GET","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XuV50vDKkkOdZiC1_IZqv4gl8Bp7mBMvzcoxxkQaKbSjUDl23mSZ8gQUCqBw"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XuV50vDKkkOdZiC1_IZqv4gl8Bp7mBMvzcoxxkQaKbSjUDl23mSZ8gQUCqBw\"}"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ac0a515f-fb6e-4d0a-a468-d9bd357614a1","keyName":"e2e-auth-iso-a-d8c510","subscription":"e2e-auth-iso-3564b1","tenant":"e2e-shared-a-6a2606","userId":"ac0a515f-fb6e-4d0a-a468-d9bd357614a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3564b1"} {"level":"info","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad0cd606-15c2-421f-ad9e-773a9cd8cdf8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57692","PortSpecifier":{"PortValue":57692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f76d8c11-9024-4a0f-8338-61497fbadd97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57692","PortSpecifier":{"PortValue":57692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224497,"nanos":513166481},"http":{"id":"f76d8c11-9024-4a0f-8338-61497fbadd97","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76d8c11-9024-4a0f-8338-61497fbadd97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53954","PortSpecifier":{"PortValue":53954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53954","PortSpecifier":{"PortValue":53954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224497,"nanos":555092561},"http":{"id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"886a1cbd-1ef8-499c-8f8d-74ce2760f6b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53956","PortSpecifier":{"PortValue":53956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53956","PortSpecifier":{"PortValue":53956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224497,"nanos":592358868},"http":{"id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","method":"GET","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G9x6IeVGD63gudco_mCjKcygoJ65FszjEiNfv9w8siZN5noBLo2OMoUXynPY"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G9x6IeVGD63gudco_mCjKcygoJ65FszjEiNfv9w8siZN5noBLo2OMoUXynPY\"}"} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T17:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019ad2a5-70ab-45c3-b36c-f7aee3037582","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224516,"nanos":876182576},"http":{"id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdae6d14-214c-4ee5-a55e-28929a19bfb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224516,"nanos":915340800},"http":{"id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a026a50-573f-41f2-a3f8-fc264f0c07c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49088","PortSpecifier":{"PortValue":49088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9de54da4-d327-492c-9b87-99f11fa001f6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49088","PortSpecifier":{"PortValue":49088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224516,"nanos":957161085},"http":{"id":"9de54da4-d327-492c-9b87-99f11fa001f6","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9de54da4-d327-492c-9b87-99f11fa001f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50288","PortSpecifier":{"PortValue":50288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50288","PortSpecifier":{"PortValue":50288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224516,"nanos":995559352},"http":{"id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4ca1c31-4ac0-492a-a701-49fb7dd35ec3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46842","PortSpecifier":{"PortValue":46842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46842","PortSpecifier":{"PortValue":46842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224534,"nanos":103607982},"http":{"id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aaabf4a-6f03-4c76-8441-52c3d8e9376c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224534,"nanos":145335496},"http":{"id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1896de7c-7ab8-4c75-817f-992ebdd0af5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e40956e-eef6-44c7-a228-567090197be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33828","PortSpecifier":{"PortValue":33828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e40956e-eef6-44c7-a228-567090197be0","method":"GET","path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e40956e-eef6-44c7-a228-567090197be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33828","PortSpecifier":{"PortValue":33828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224534,"nanos":183697055},"http":{"id":"6e40956e-eef6-44c7-a228-567090197be0","method":"GET","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e40956e-eef6-44c7-a228-567090197be0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e40956e-eef6-44c7-a228-567090197be0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e40956e-eef6-44c7-a228-567090197be0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e40956e-eef6-44c7-a228-567090197be0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e40956e-eef6-44c7-a228-567090197be0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46858","PortSpecifier":{"PortValue":46858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","method":"GET","path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46858","PortSpecifier":{"PortValue":46858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224534,"nanos":216962917},"http":{"id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","method":"GET","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d1c888a-d902-4633-82b9-cce118dd5a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf8d274-6089-44ea-a372-195b4aa83ea1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36788","PortSpecifier":{"PortValue":36788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36788","PortSpecifier":{"PortValue":36788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224555,"nanos":604900094},"http":{"id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ad1acb-9b74-49ef-83e7-e36dd64501ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52744","PortSpecifier":{"PortValue":52744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52744","PortSpecifier":{"PortValue":52744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224555,"nanos":644901719},"http":{"id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/auth-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"094a8fb1-ad7c-4fd6-892b-cde93f43d9aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36798","PortSpecifier":{"PortValue":36798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36798","PortSpecifier":{"PortValue":36798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224555,"nanos":681295023},"http":{"id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcEI2g6GxiPgeSzD_DFWo1rC92mfw2NZcBB8fwn3Di00lxk51WT7PYJ9jM43"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcEI2g6GxiPgeSzD_DFWo1rC92mfw2NZcBB8fwn3Di00lxk51WT7PYJ9jM43\"}"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c77b211-77a5-4b45-887c-8b5a662f7b5f","keyName":"e2e-auth-iso-a-7c5c98","subscription":"e2e-auth-iso-f31039","tenant":"e2e-shared-a-6a2606","userId":"2c77b211-77a5-4b45-887c-8b5a662f7b5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/auth-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f31039"} {"level":"info","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dffc42ab-7ef6-4063-8cce-ab10e29dae43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc81fcfce7c3c4501db97536bd855609f47bcb61bc4ba2f1999a5b14624cf1d2"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3aa9202cf34bd53de50fd7db258b90aac8338b9939ef5546f1d4618c95f1d364"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff41dc79a740878a552a98ba62db681bb4248978aa1c797e60ce36049aec2e0"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd511350bda595c517001c79938c980b8f48fcff67c0dbdc3e08624883c7434"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7e8a1339fa71e985b81e4e6dd04ff8ee8719487343315cac75685d68178d21"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17a8cd2027cfff31dcde58e1b26b00c518bf06af629542b4c07e3d814ab5112a"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c62350245918aad10055c14a0fe01a762801f9cdf0a4953dbe1e8328108a2907"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/181c08d999552392ad8c4a14963e5fa146d224a814bb8b1d0f73d89e08e4e244"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff29ef90f7ddaa87ad23db34f42a6a0ec418c9dab21fb97dbbb4240bbff3904d"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68d5d9f503a4a8efc03e4e894cc5f2aa67302f265bae9b1460807b352aa5cbea"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5491c9634f69c593223257ae716536146882adc41c025e239a6acdcd598fc2d9"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d881b8304696ba3964f5f2f8539ae491de6e33557037aa40ec945bae0fa70b1"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e4f74fc732da175ed3e725641ef441ab52a63269f223c4764f9c01ee2e56e32"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8ac8a4c7c9cf0e96221f253f60382e063e31e91b5b1797f71b2317ef8a087e4"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee30eac32f2d5309d8753f282cc6b41bc5db3f006f5254516adfa54dca422ef"} {"level":"info","ts":"2026-07-16T17:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b62ca552c4419fdc6d81b5fc97a41ff6b0a49006ba74fd5cf685d9a03519ca9"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"error","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"error","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"error","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"error","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"error","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"error","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:56:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"error","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:56:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"info","ts":"2026-07-16T17:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5"} {"level":"error","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"error","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"info","ts":"2026-07-16T17:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"debug","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a"} {"level":"info","ts":"2026-07-16T17:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224630,"nanos":134074761},"http":{"id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/sub-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34d04cb0-08a9-4db1-bee2-6aa66d62a7d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224630,"nanos":177198841},"http":{"id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/sub-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba77078c-3134-460e-b983-e53bb6d8d7ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32904","PortSpecifier":{"PortValue":32904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32904","PortSpecifier":{"PortValue":32904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224630,"nanos":219225127},"http":{"id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","method":"GET","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nPsXzHYFLWTVhkRx_7G8nZFzIZlDtxG1qkX4jtwJha9eg8jkYbv7vldaPNDR"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nPsXzHYFLWTVhkRx_7G8nZFzIZlDtxG1qkX4jtwJha9eg8jkYbv7vldaPNDR\"}"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c889a580-0731-400c-a538-fc723ba63933","keyName":"e2e-sub-iso-4258f3","subscription":"e2e-a-only-63dcac","tenant":"e2e-shared-a-6a2606","userId":"c889a580-0731-400c-a538-fc723ba63933","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/sub-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-63dcac"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19e1989-99a5-4b09-af75-c2d39ad754c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32914","PortSpecifier":{"PortValue":32914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"290f104b-80a7-4cde-a733-088ea15d41c9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32914","PortSpecifier":{"PortValue":32914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224630,"nanos":258871339},"http":{"id":"290f104b-80a7-4cde-a733-088ea15d41c9","method":"GET","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GAnW4uxPn3DnnR8E_cfBZAG595d8hyW9vzCvhEyyZlJqLP9Yb4tWpJkEVr5E"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GAnW4uxPn3DnnR8E_cfBZAG595d8hyW9vzCvhEyyZlJqLP9Yb4tWpJkEVr5E\"}"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73b17aac-c115-4f00-a14d-677caf24f097","keyName":"e2e-sub-iso-7b84f4","subscription":"e2e-b-only-63dcac","tenant":"e2e-shared-b-4816ad","userId":"73b17aac-c115-4f00-a14d-677caf24f097","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/sub-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-63dcac"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"290f104b-80a7-4cde-a733-088ea15d41c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51612","PortSpecifier":{"PortValue":51612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55ca2a63-7ba8-44ac-8df8-347139504db5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51612","PortSpecifier":{"PortValue":51612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224640,"nanos":505497470},"http":{"id":"55ca2a63-7ba8-44ac-8df8-347139504db5","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/sub-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55ca2a63-7ba8-44ac-8df8-347139504db5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51262","PortSpecifier":{"PortValue":51262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51262","PortSpecifier":{"PortValue":51262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224640,"nanos":548038443},"http":{"id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/sub-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16282ead-ffdb-4108-828e-076b1e4ba4cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224640,"nanos":590176453},"http":{"id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-k1e7Swz50YR1Fvp_2ZihQnhxFEDLCNCYf6xcfwLP01o6MIDtHYIa3Frapqg"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-k1e7Swz50YR1Fvp_2ZihQnhxFEDLCNCYf6xcfwLP01o6MIDtHYIa3Frapqg\"}"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7eb853c-d291-4b7c-90aa-5737bad30a5c","keyName":"e2e-sub-iso-cbdb5c","subscription":"e2e-shared-sub-3d20bf","tenant":"e2e-shared-a-6a2606","userId":"d7eb853c-d291-4b7c-90aa-5737bad30a5c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/sub-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3d20bf"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7089a449-2c58-45ea-a75b-4a0004aa0ebd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51272","PortSpecifier":{"PortValue":51272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b6d9e4-0355-4476-b643-529d33e760fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51272","PortSpecifier":{"PortValue":51272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224640,"nanos":624875058},"http":{"id":"c1b6d9e4-0355-4476-b643-529d33e760fe","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gYHtj0OTeReW9zZ6_mZkb3R61ZdiqNIJPHJMq3nY9L4HVg8ao96SBdS4e1o3"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gYHtj0OTeReW9zZ6_mZkb3R61ZdiqNIJPHJMq3nY9L4HVg8ao96SBdS4e1o3\"}"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de2cbf37-623b-4f69-adbd-903531cf35d5","keyName":"e2e-sub-iso-b68094","subscription":"e2e-shared-sub-3d20bf","tenant":"e2e-shared-b-4816ad","userId":"de2cbf37-623b-4f69-adbd-903531cf35d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/sub-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3d20bf"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b6d9e4-0355-4476-b643-529d33e760fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40800068884eb6b7b37bec6d71c07d0a38f97151e8656168591393342f827bf5"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34af38128770495ad61f11011d1b38875d3ca3c5cd5ca8c197c136840d9ccd54"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56a2cb77e4caa8cd2ad0269e42704826fac76242d945aa0c56e0c48148cad167"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02d43c4e43fc8932d199a95cd9db76f4e0aeecf49e4d1136b6c0c72a54c41029"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/351868ca3868a2e750fa15a044103235b4b73b4835cdf77a4b43ac2107319446"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d17545b65172b444ae30a9a202c747183cd6f174b852ac2e0f6da179d082854f"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6732135f07840270559412d7595ad39d9162d755661d3086ed222c9e8540da5"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57b67dfbda1f8b819d89e79f43b4ab3b0f3f25d1920048473ea85c0a54e05e4a"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0af347ec96a29d8483b4cc751b02fc780181d5be58018d16c61c23ce1e76414a"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb03acce6e87c1a3b060a120c3706c57b3e0c5d735c786b0c1e2e49922fcea6f"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c17854d08095717a55c709d787c2cd8c98249082dc44df9b23f5af80b743bf5e"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8766392e279e0cfcbcd16d5c30f335f0fbb9be124197e8d6e22e50b40c7364a"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c751fedbb66442762c0666651066826617e3435a9c5f06c424bb299f98e7795"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b860a72e2330ef7781bb83652864dd4e32c7de5da4cf05c9cabf93251c77b0"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab52609663556c6e4952d5b0b788a2efa124c7f182e096920b01c3bdcdf164c2"} {"level":"info","ts":"2026-07-16T17:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c2454a114552eda20187be303336cdfe0281aeab104e21f3208e64368f2cf7d"} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"debug","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"error","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b"} {"level":"debug","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"} {"level":"debug","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc09103f1b7b300a6f58d0004b5f0ee93b55c6a7b3848c237c50b830ffa5395c"} {"level":"debug","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e958d5fd97b01606769df3122224801e57979d7f8637a670528990cf64190b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"error","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"error","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"error","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"} {"level":"info","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f275f012c84e96372f733270fd2fc200a33269c50a98d2afffff7e8e18867ea"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f"} {"level":"debug","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b"} {"level":"info","ts":"2026-07-16T17:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46222","PortSpecifier":{"PortValue":46222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46222","PortSpecifier":{"PortValue":46222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224711,"nanos":540749424},"http":{"id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52acb3df-98cc-4c2f-a9d7-5978b4749ee7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58044","PortSpecifier":{"PortValue":58044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58044","PortSpecifier":{"PortValue":58044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224711,"nanos":586494305},"http":{"id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d21c7bd-59a8-4c00-b1b3-cf829d158c97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46226","PortSpecifier":{"PortValue":46226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46226","PortSpecifier":{"PortValue":46226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224711,"nanos":628596496},"http":{"id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo\"}"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","subscription":"e2e-rate-iso-a-6e0259","tenant":"e2e-shared-a-6a2606","userId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-6e0259\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e0259"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","selected_subscription":"e2e-rate-iso-a-6e0259","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-6e0259@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d4d0bd-0b55-4610-b453-067cd0f8ce47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46230","PortSpecifier":{"PortValue":46230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9be0233b-a419-4eeb-b123-cacf9e110466","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46230","PortSpecifier":{"PortValue":46230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224712,"nanos":693291262},"http":{"id":"9be0233b-a419-4eeb-b123-cacf9e110466","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo\"}"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","subscription":"e2e-rate-iso-a-6e0259","tenant":"e2e-shared-a-6a2606","userId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-6e0259\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e0259"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","selected_subscription":"e2e-rate-iso-a-6e0259","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-6e0259@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9be0233b-a419-4eeb-b123-cacf9e110466","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46246","PortSpecifier":{"PortValue":46246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224713,"nanos":737981954},"http":{"id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AZsmKxsJymwCOWix_oDLFaQrNe02n0bQIXQCqpO2wurpMq73mimzPTQ4ncSo\"}"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","subscription":"e2e-rate-iso-a-6e0259","tenant":"e2e-shared-a-6a2606","userId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-6e0259\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e0259"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4e451b49-683e-4c76-9ee5-c42fbf0a9d7e","keyName":"e2e-rate-a-6e0259","selected_subscription":"e2e-rate-iso-a-6e0259","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-6e0259@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e0259","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dba8eb87-fb1b-4f64-8440-d8c6a12caa30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40758","PortSpecifier":{"PortValue":40758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40758","PortSpecifier":{"PortValue":40758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224726,"nanos":793610257},"http":{"id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42008b0f-9d5c-4b4c-b260-e0034c043c4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35610","PortSpecifier":{"PortValue":35610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db10fe84-1123-4417-9d36-0562e6209bc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35610","PortSpecifier":{"PortValue":35610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224726,"nanos":835130795},"http":{"id":"db10fe84-1123-4417-9d36-0562e6209bc4","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b6445453-e8eb-499d-8291-4a72be70034f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"]}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6cb05460c4a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f6a0fb2-425a-457f-b71d-3313eb1b3de0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b6445453-e8eb-499d-8291-4a72be70034f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ff9def81f90a7434f8b6b63970451a0cd8679b50155c9b3c2761c306e4ba43c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db10fe84-1123-4417-9d36-0562e6209bc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40766","PortSpecifier":{"PortValue":40766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40766","PortSpecifier":{"PortValue":40766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224726,"nanos":870129807},"http":{"id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR\"}"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","subscription":"e2e-rate-iso-a-20d369","tenant":"e2e-shared-a-6a2606","userId":"881a08b9-0995-48bc-b093-424505887b1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-20d369\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-20d369"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","selected_subscription":"e2e-rate-iso-a-20d369","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-20d369@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ea6b8a-fdb4-4866-a886-75e1a3740119","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40780","PortSpecifier":{"PortValue":40780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40780","PortSpecifier":{"PortValue":40780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224727,"nanos":913744836},"http":{"id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR\"}"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","subscription":"e2e-rate-iso-a-20d369","tenant":"e2e-shared-a-6a2606","userId":"881a08b9-0995-48bc-b093-424505887b1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-20d369\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-20d369"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","selected_subscription":"e2e-rate-iso-a-20d369","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-20d369@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ffa5916-054f-425b-b9a0-b7474bec2a89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40792","PortSpecifier":{"PortValue":40792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions","host":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40792","PortSpecifier":{"PortValue":40792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224728,"nanos":955081042},"http":{"id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","method":"POST","headers":{":authority":"e2e-shared-a-6a2606.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GULkkJwNJzoW4WTG_6zQ0VSkN5qV2eJ3KloJr9bmzYwTIUeTGqOr2MnFRjLR\"}"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","subscription":"e2e-rate-iso-a-20d369","tenant":"e2e-shared-a-6a2606","userId":"881a08b9-0995-48bc-b093-424505887b1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\",\"requestedSubscription\":\"e2e-rate-iso-a-20d369\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2606.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2606/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-20d369"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"881a08b9-0995-48bc-b093-424505887b1a","keyName":"e2e-rate-a-20d369","selected_subscription":"e2e-rate-iso-a-20d369","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2606/e2e-rate-iso-a-20d369@ai-tenant-e2e-shared-a-6a2606/rate-test-model-6a2606","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6a2606","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-20d369","namespace":"ai-tenant-e2e-shared-a-6a2606","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6071c7-4a03-4df0-bf23-e1b1009976c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35620","PortSpecifier":{"PortValue":35620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","method":"POST","path":"/ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad/v1/completions","host":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35620","PortSpecifier":{"PortValue":35620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784224728,"nanos":993710689},"http":{"id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","method":"POST","headers":{":authority":"e2e-shared-b-4816ad.apps.3395545f-69ec-4587-9588-6cb05460c4a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GAUIPpV1AYBJJJ9l_ygKyFcw7jIHnt4EK6j2mjE5wZYveDd1coag0sRNH2PO"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GAUIPpV1AYBJJJ9l_ygKyFcw7jIHnt4EK6j2mjE5wZYveDd1coag0sRNH2PO\"}"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66a2e214-8324-4fc4-8940-c8f27bdcbb95","keyName":"e2e-rate-b-20d369","subscription":"e2e-rate-iso-b-20d369","tenant":"e2e-shared-b-4816ad","userId":"66a2e214-8324-4fc4-8940-c8f27bdcbb95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad\",\"requestedSubscription\":\"e2e-rate-iso-b-20d369\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4816ad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4816ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-20d369","namespace":"ai-tenant-e2e-shared-b-4816ad","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4816ad/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-20d369"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66a2e214-8324-4fc4-8940-c8f27bdcbb95","keyName":"e2e-rate-b-20d369","selected_subscription":"e2e-rate-iso-b-20d369","selected_subscription_key":"ai-tenant-e2e-shared-b-4816ad/e2e-rate-iso-b-20d369@ai-tenant-e2e-shared-b-4816ad/rate-test-model-4816ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4816ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-20d369","namespace":"ai-tenant-e2e-shared-b-4816ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7f29bd-3127-4a4f-af3c-a0e2c63b6982","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7edec18f8c7764cae42e742d457bd0701c9124c6986be32e2346af43b5e61593"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/913ee3636d189783199a2716eac06bac761089b035cda3edbb55e6785fb1cb8c"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b616c7320e32d0efd318a900989a2bf7283d7d4258fd81e9c47cb8a3cdcfda0"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/737b1d74c926d603e5102d58480c7ac15a6965877a8e909505ba11a41a0da6e8"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c15bc86cc324ef64fde33faab8d173aaae4163c780bac7113869aab4cf581e2c"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b108b44d438efa5ac1d4e8ba72d3a5df836653cce9a2942111b68fc234b9719"} {"level":"info","ts":"2026-07-16T17:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c8ac3ce0138083fadb3fc772eeb403e679d75c13e559c1565cb830145134f13"} {"level":"info","ts":"2026-07-16T17:58:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013ef2ad0403376193dcc28e2049e94d60e04d51dce88780911e4f2943bd06ef"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1de070bba532c2cc87f754e87926925d72434c73a7cc5e4badce1fd5f0f3186"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eb9bcc5c01f1bf688b7c3610dee2cb5ee1dee543290ec2eafaf47686e02db28"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c813d587658faffc03e95db1af8642583eabaa50b2624a8d4aa3224adcebad2"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25e9a768e21b50b1a3085226d5f2188720b746930ec15b7ddd61c377e5030a9"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4574b2ff34422312490e584083ade03348d0662c95020abf98ee93d5637aef8b"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f07db14986dd9a0ff7c55aef82e29cf4303fb66e6cf1566cd61dc99a36c8409f"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be17697ae7d01deeac8e9f0f374fcc7647ce80ef634539f7bdd81c1534ea7e2"} {"level":"info","ts":"2026-07-16T17:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c736e58162de1589e872020c4434f41633396010e6eb58da7ad27c3c35aa02e6"} {"level":"info","ts":"2026-07-16T17:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ab9c065baffd9e58014e2f1c1a49388db5566a7f32093abcb57f908428468bd"} {"level":"info","ts":"2026-07-16T17:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e61969b58c7400626976ca432416c47083629d32e118ca0c52aede9b0fd9cd03"} {"level":"info","ts":"2026-07-16T17:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c65ba85515cc84b406d8d4119704518f96a6f23c3636958591058e1aeb1411d"} {"level":"info","ts":"2026-07-16T17:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e3e2b7be7ffbcf89a9a37ef9def9590a5f16b24b85a311e08a53cec60ae17c6"}